Threats tagged 'ghsa-43vc-qgr9-gj8f'

A type confusion vulnerability in PostgreSQL anonymous RECORD types allows an object creator to execute arbitrary code with the privileges of the operating system user running the database. This occurs due to row types having dropped attributes in the same positions but with different widths or alignments. The issue affects PostgreSQL major versions 17 and 18, specifically versions before 17.12 and 18.7. Versions prior to 17 are not affected.