Search: CVE-2026-6637

CVE-2026-6637 is a high-severity stack-based buffer overflow vulnerability in the PostgreSQL database module "refint". It allows an unprivileged database user to execute arbitrary code with the privileges of the operating system user running the database. Additionally, if a user-controlled column is declared as a "refint" cascade primary key and user-controlled updates to that column are allowed, a SQL injection can enable arbitrary SQL execution as the database user. This vulnerability affects PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23. No official patch or remediation details are currently provided.