TI-2026-05677 CVE-2026-6477 · GHSA-jm5f-gpfq-q9h3
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
Priority MEDIUM 40
Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with…