A stack-based buffer overflow vulnerability exists in psqlODBC versions before 18.00.0006 when using updatable cursors, which are enabled by default. The driver adds hidden ctid and oid columns to queries and copies values into a fixed-size buffer without proper length checks. This can lead to memory corruption or application crashes if a malicious or untrusted server sends oversized values or if a database user creates a specially crafted view. Builds with _FORTIFY_SOURCE enabled abort on detection, while others may overwrite adjacent stack memory.