Threats tagged 'ghsa-p6rq-g598-qx9f'

A vulnerability in psqlODBC versions before 18.00.0006 allows an attacker to cause application crashes or leak client memory. This occurs when an updatable cursor over a table without OIDs has an auto-increment int4 column whose name contains format string directives. The driver improperly uses this column name in a printf-style format string, leading to memory read issues during query construction.