CVE-2023-5869High· 8.8▾ TwilightA flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.9 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
4.3%
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.
advanced-cluster-security/rhacs-central-db-rhel8 (all versions)advanced-cluster-security/rhacs-main-rhel8 (all versions)advanced-cluster-security/rhacs-operator-bundle (all versions)advanced-cluster-security/rhacs-scanner-db-rhel8 (all versions)advanced-cluster-security/rhacs-scanner-db-slim-rhel8 (all versions)postgresql (all versions)postgresql:13 (all versions)postgresql:12 (all versions)postgresql:10 (all versions)postgresql:15 (all versions)postgresql:10 (all versions)postgresql:12 (all versions)postgresql:10 (all versions)postgresql:12 (all versions)postgresql:10 (all versions)postgresql:12 (all versions)postgresql:10 (all versions)postgresql:12 (all versions)postgresql:13 (all versions)postgresql:10 (all versions)postgresql:12 (all versions)postgresql:13 (all versions)postgresql:10 (all versions)postgresql:12 (all versions)postgresql:13 (all versions)postgresql:10 (all versions)postgresql:13 (all versions)postgresql:12 (all versions)postgresql:10 (all versions)postgresql:13 (all versions)postgresql:12 (all versions)postgresql:10 (all versions)postgresql:15 (all versions)postgresql (all versions)postgresql:15 (all versions)postgresql (all versions)postgresql (all versions)postgresql:15 (all versions)rh-postgresql12-postgresql (all versions)rh-postgresql10-postgresql (all versions)rh-postgresql13-postgresql (all versions)advanced-cluster-security/rhacs-central-db-rhel8 (all versions)advanced-cluster-security/rhacs-main-rhel8 (all versions)advanced-cluster-security/rhacs-operator-bundle (all versions)advanced-cluster-security/rhacs-scanner-db-rhel8 (all versions)advanced-cluster-security/rhacs-scanner-db-slim-rhel8 (all versions)advanced-cluster-security/rhacs-central-db-rhel8 (all versions)advanced-cluster-security/rhacs-main-rhel8 (all versions)advanced-cluster-security/rhacs-operator-bundle (all versions)advanced-cluster-security/rhacs-scanner-db-rhel8 (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-121259Medium· 6.5Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator
CVE-2026-119729Medium· 6.5Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service
CVE-2026-114691Medium· 5.9Gcc: integer wrap in `std
CVE-2024-40635Medium· 4.6containerd: containerd has an integer overflow in User ID handling (CVE-2024-40635)
CVE-2022-50998High· 7.5Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-123151High· 7.5Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail