VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Nov 13, 2025· Updated Apr 15, 2026

CVE-2025-12818

CVE-2025-12818

Description

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

230

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.