Search: CVE-2026-14669

CVE-2026-14669 is a heap-based buffer overflow vulnerability in PostgreSQL's to_char function for timestamptz data type. It allows an attacker who can control the timezone input to execute arbitrary code with the privileges of the database operating system user by providing a long POSIX timezone abbreviation. This vulnerability affects multiple PostgreSQL major versions prior to specific patch releases.