Threats tagged 'ghsa-rwj3-5rgf-rr95'

A vulnerability in the psqlODBC driver affects versions before 18.00.0006. The parser for ODBC escape sequences improperly handles argument offsets for {fn} escapes by writing into a fixed 16-entry stack array without bounds checking and without initializing the array. This can cause stack overflow when too many arguments are supplied. Additionally, certain escapes ({d}, {t}, {ts}, {escape}) write one byte beyond a 128-byte stack buffer. Applications that pass untrusted SQL text to the driver risk memory corruption in their process.