CVE-2026-6575: PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array
Buffer over-read in PostgreSQL function pgrestoreattributestats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6575?
CVE-2026-6575 has been assigned a high severity rating due to the potential for buffer over-read which may lead to information leakage.
How do I fix CVE-2026-6575?
To mitigate CVE-2026-6575, upgrade PostgreSQL to version 18.4 or later where the vulnerability has been addressed.
What versions of PostgreSQL are affected by CVE-2026-6575?
CVE-2026-6575 affects PostgreSQL versions 18.0 to 18.3 inclusive.
What type of vulnerability is CVE-2026-6575?
CVE-2026-6575 is a buffer over-read vulnerability that can disrupt query planning in PostgreSQL.
Can CVE-2026-6575 lead to data corruption?
While CVE-2026-6575 primarily allows for information leakage, it does not directly cause data corruption.