Threats tagged 'ghsa-239q-q7g3-5876'

psqlODBC versions before 18.00.0006 have a vulnerability where the driver sizes its row cache based on the column count of the first cursor result but recalculates the column count on subsequent FETCH replies without verifying consistency. This can lead to buffer overflows or underflows when a malicious or untrusted server sends FETCH replies with differing column counts, potentially causing memory corruption. The issue is exploitable when UseDeclareFetch is enabled.