Threats tagged 'ghsa-8qpw-62p2-qh8p'

A type confusion vulnerability in PostgreSQL's min/max aggregate optimization allows an object creator to execute arbitrary code with the privileges of the operating system user running the database. This occurs when a user-defined aggregate uses the SORTOP option, causing the planner to treat the aggregate's input and result as the same type even when they differ. Versions prior to PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.