Threats tagged 'ghsa-38f3-w39j-87qm'

An integer wraparound vulnerability in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database. This occurs by freeing an allocation larger than 1 GB and causing its memory block to be reused for smaller chunks, where the back-pointer offset cannot represent the correct position. The vulnerability affects PostgreSQL major versions 16 through 18, specifically minor versions before 18.7, 17.12, and 16.16. Versions prior to 16 are not affected.