Buffer overflow in Postgresql
CVE-2026-14664
Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but…
Vulnerability class: Buffer Overflow
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- N/a Postgresql — versions 18, 17, 16
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-14664?
- CVE-2026-14664 is a high-severity vulnerability in Postgresql, classified under Heap-based Buffer Overflow. CVSS score: 8.8/10. Published 2026-08-13.
- How severe is CVE-2026-14664?
- High severity. CVSS v3 base score is 8.8 out of 10.