Out-of-bounds Read in Enterprisedb Pglogical

CVE-2026-50735

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in an out-of-bounds read. A party acting as the publisher for a subscription, for…

Vulnerability class: Buffer Overflow

Affected products

Weakness classification (CWE)

References