High severity8.2NVD Advisory· Published Aug 13, 2026· Updated Aug 19, 2026
CVE-2026-14679
CVE-2026-14679
Description
Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
52cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*range: >=14.0,<14.24
- (no CPE)range: <18.5, <17.11, <16.15, <15.19, <14.24
- osv-coords50 versionspkg:rpm/almalinux/postgresql18-contribpkg:rpm/almalinux/postgresql18-staticpkg:rpm/almalinux/postgresql18-server-develpkg:rpm/almalinux/postgis-utilspkg:rpm/opensuse/postgresql17&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/postgresql18-test-rpm-macrospkg:rpm/almalinux/postgresql18-serverpkg:rpm/almalinux/postgresql18-upgrade-develpkg:rpm/almalinux/pgvectorpkg:rpm/almalinux/postgispkg:rpm/almalinux/postgres-decoderbufspkg:rpm/almalinux/postgresql-test-rpm-macrospkg:rpm/almalinux/postgresql18-plperlpkg:rpm/almalinux/postgresql18-plpython3pkg:rpm/almalinux/postgresql18-private-libspkg:rpm/almalinux/postgis-docspkg:rpm/almalinux/postgresql-upgradepkg:rpm/almalinux/postgresqlpkg:rpm/almalinux/postgresql-docspkg:rpm/almalinux/postgresql-plperlpkg:rpm/almalinux/postgresql-plpython3pkg:rpm/almalinux/postgresql-pltclpkg:rpm/almalinux/postgresql-private-develpkg:rpm/almalinux/postgresql-serverpkg:rpm/almalinux/postgresql-staticpkg:rpm/almalinux/postgresql-testpkg:rpm/almalinux/postgresql18-upgradepkg:rpm/almalinux/postgresql-private-libspkg:rpm/opensuse/postgresql16&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/postgis-upgradepkg:rpm/opensuse/postgresql15&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/postgis-clientpkg:rpm/opensuse/postgresql14&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/pg_repackpkg:rpm/opensuse/postgresql18&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/postgresql14&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/postgresql16&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/postgresql18pkg:rpm/almalinux/postgresql18-docspkg:rpm/almalinux/postgresql18-testpkg:rpm/almalinux/postgresql-upgrade-develpkg:rpm/opensuse/postgresql15&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/postgresql17&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/postgresql18&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/postgresql18-mini&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/postgresql-server-develpkg:rpm/almalinux/pgauditpkg:rpm/almalinux/postgresql-contribpkg:rpm/almalinux/postgresql18-private-develpkg:bitnami/postgresql
< 18.6-1.el10_2+ 49 more
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 3.5.3-6.module_el9.8.0+311+c39b793b
- (no CPE)range: < 17.11-1.1
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 0.6.2-2.module_el9.6.0+167+4e561146
- (no CPE)range: < 3.5.3-6.module_el9.8.0+311+c39b793b
- (no CPE)range: < 2.4.0-1.Final.module_el9.4.0+66+eb9878bc
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 3.5.3-6.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.1
- (no CPE)range: < 3.5.3-6.module_el9.8.0+311+c39b793b
- (no CPE)range: < 15.19-1.1
- (no CPE)range: < 3.5.3-6.module_el9.8.0+311+c39b793b
- (no CPE)range: < 14.24-1.1
- (no CPE)range: < 1.5.1-1.module_el9.6.0+146+c54fdeca
- (no CPE)range: < 18.6-1.1
- (no CPE)range: < 14.24-160000.1.1
- (no CPE)range: < 16.15-160000.1.1
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 15.19-160000.1.1
- (no CPE)range: < 17.11-160000.1.1
- (no CPE)range: < 18.6-160000.1.1
- (no CPE)range: < 18.6-160000.1.1
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.0-1.module_el9.4.0+66+eb9878bc
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 14.24.0
Patches
Vulnerability mechanics
References
1- www.postgresql.org/support/security/CVE-2026-14679/nvdVendor Advisory
News mentions
1- PostgreSQL: 25 Vulnerabilities Disclosed, Many Allowing Code ExecutionVypr Intelligence · Aug 13, 2026