CVE-2026-14679

A stack buffer overflow vulnerability in PostgreSQL's argument name matching can be exploited by an object creator to manipulate OUT parameter counts, potentially leading to undefined behavior. This flaw allows for the writing of limited byte values (0x0 and 0x1), which could compromise system integrity. Organizations using affected PostgreSQL versions prior to 18.5, 17.11, 16.15, 15.19, and 14.24 should prioritize patching to mitigate the risk.