Threats tagged 'ghsa-6q3v-qqc9-g2rv'

A type confusion vulnerability in PostgreSQL's pg_restore_attribute_stats() function allows an object creator to execute arbitrary code with the privileges of the operating system user running the database. This occurs due to conflation of range and multirange values. The issue affects PostgreSQL major version 18, specifically versions before 18.5. Versions prior to 18 are not affected.