Threats tagged 'bit-postgresql-2026-6575'

CVE-2026-6575 is a medium-severity buffer over-read vulnerability in PostgreSQL version 18 prior to 18.4. The issue occurs in the pg_restore_attribute_stats() function, which improperly handles array values of unmatched length, causing query planning to read beyond the end of an array. This flaw allows a table maintainer to infer memory contents beyond the intended array boundary. Versions before PostgreSQL 18 are not affected. No official patch or remediation details are currently provided.