CVE-2026-6473 is an integer overflow vulnerability in PostgreSQL that affects Red Hat Ansible Automation Platform 2.2, delivered as a bootable container image. The flaw occurs when an unprivileged database user passes extremely large inputs to certain database functions, causing an integer overflow that leads to undersized memory allocation and an out-of-bounds write. This memory corruption can allow execution of arbitrary code with the privileges of the database process or cause a denial of service through segmentation faults. Red Hat Enterprise Linux security features such as SELinux, ASLR, and NX stack protection reduce the likelihood of successful exploitation. The vulnerability is rated as important (high severity) by Red Hat. No patch or fix has been provided yet, and mitigation requires input validation and truncation of oversized objects before they reach the database backend.

The vulnerability allows an attacker with low privileges on the database to cause memory corruption via integer overflow, potentially leading to arbitrary code execution as the database OS user or denial of service through crashes. Red Hat's default security mechanisms reduce the risk of code execution but do not eliminate the possibility. The impact includes high confidentiality, integrity, and availability risks due to possible unauthorized code execution, data corruption, or service disruption.

No official fix or patch is currently available for this vulnerability. Mitigation requires validating the length of data and the size of objects on all client APIs and web interfaces. Oversized string, array, or binary objects should be blocked, dropped, or truncated before being passed into backend SQL queries. Red Hat Enterprise Linux security features such as SELinux enforcement, ASLR, and NX stack protection help reduce exploitation risk. Monitor Red Hat advisories for updates and patches.