Threats tagged 'ghsa-x867-p3rr-qc5f'

A type confusion vulnerability in PostgreSQL's plperl procedural language allows an object creator to execute arbitrary code by blessing a non-hash reference into PostgreSQL::InServer::ARRAY. This affects PostgreSQL versions prior to 18.7, 17.12, 16.16, 15.20, and 14.25. The vulnerability has a high severity with a CVSS score of 8.8. It is not confirmed whether the pointer can be controlled sufficiently to achieve full security impact, but the issue is treated as potentially exploitable.