CyberRota Analysis
AI-GeneratedPostgreSQL 32-bit builds of pltcl and plperl are vulnerable to an integer wraparound issue, allowing an attacker to manipulate memory allocation and potentially execute arbitrary code with the privileges of the database server user. This vulnerability poses a significant risk to systems running affected versions prior to 18.5, 17.11, 16.15, 15.19, and 14.24. Database administrators and organizations using these versions should prioritize immediate updates to mitigate the risk of exploitation.
Original NVD Description
Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.