CVE-2025-4207CWE-126

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

Medium · published May 8, 2025

CVSS v3.1
5.9
EPSS
1%
Percentile
54.7
In the wild
Unconfirmed
What it is

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00758 · 54.7th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2025-05-08T14:22Z
EPSS history
Timeline
  • 08 MAY 14:22Z
    PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation
    cvelistv5