CVE-2026-2007CWE-122

PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory

High · published February 12, 2026

CVSS v3.1
8.2
EPSS
1%
Percentile
44.7
In the wild
Unconfirmed
What it is

Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation. PostgreSQL 18.1 and 18.0 are affected.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00546 · 44.7th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-02-12T13:00Z
EPSS history
Timeline
  • 12 FEB 13:00Z
    PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory
    cvelistv5