Threats tagged 'ghsa-ccpf-r36p-xpv9'

A heap-based buffer overflow vulnerability exists in the ts_rank_cd() function of PostgreSQL. This flaw may allow a database user to execute arbitrary code with the privileges of the operating system user running the database. The vulnerability is triggered by an invalid tsvector containing duplicate positions. Versions prior to PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.