Threats tagged 'ghsa-7m3p-q8w8-4qgh'

A type confusion vulnerability in PostgreSQL allows an object creator to execute arbitrary code with the privileges of the operating system user running the database. This occurs due to inadequate tracking of typed values, leading to stale values appearing in various system components. The flaw can be exploited primarily via ALTER ... SET DATA TYPE commands and other DDL operations. Versions prior to PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected. The vulnerability has a high severity score of 8.8 CVSS v3.1.