This vulnerability involves a buffer over-read in PostgreSQL's pg_restore_attribute_stats() function when it processes array values of unmatched length. The issue causes the query planner to read past the end of one array, potentially leaking memory data to a user with table maintainer privileges. The vulnerability affects PostgreSQL major version 18, specifically minor versions before 18.4. There is no indication that earlier major versions are impacted. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low complexity, and requiring privileges with no user interaction.

An attacker with table maintainer privileges can exploit this vulnerability to infer memory values beyond the intended array boundary. This may lead to partial disclosure of memory contents, which could aid in further attacks or information gathering. There is no indication of integrity or availability impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the PostgreSQL vendor advisory for current remediation guidance. Since the vulnerability affects versions before 18.4, upgrading to PostgreSQL 18.4 or later, once available, is likely the recommended fix. Until an official patch or update is released, restrict table maintainer privileges to trusted users only to reduce risk.