Search: CVE-2026-120063

CVE-2026-120063 is a stack-based buffer overflow vulnerability in the PostgreSQL psqlODBC driver. It occurs when quoting schema or table names into a fixed 128-byte stack buffer, allowing writes up to two bytes beyond the buffer's end for long names. This overflow can corrupt the stack with a double quote and a null byte. The vulnerability affects versions before 18.00.0006 and arises from parsing SQL text that includes untrusted schema or table names. Exploitation requires forwarding untrusted SQL text to the driver.