Threats tagged 'ghsa-2wgx-cxvp-mvpw'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.7	CVE-2026-105614PostgreSQL Anonymizer's anon.image_blur() function doesn't check the declared dimension of the provided image Medium4.72026-10-28GCVE DatabaseCVE-2026-105614 PostgreSQL Anonymizer's anon.image_blur() function fails to validate the declared dimensions of an input image, allowing attackers to supply small images with falsely large declared dimensions. This can cause excessive memory consumption leading to backend process termination and cluster-wide crash recovery. The issue is fixed in version 3.3.0 and later. Report on CVE-2026-105614 Vulnerability CWE-789 #ghsa-2wgx-cxvp-mvpw	GCVE Database	2026-10-28

Page 1 of 1