An integer wraparound vulnerability in PostgreSQL's in-memory tuple-size calculations allows a database user with limited privileges to execute arbitrary code with the operating system privileges of the database process. This affects PostgreSQL versions prior to 18.7, 17.12, 16.16, 15.20, and 14.25. The vulnerability has a high severity with a CVSS score of 8.8.