CVE-2026-4427

Publication date

2026-03-19 14:24:02

Family

redhat

State

PUBLISHED

Description

A flaw was found in pgproto3. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message with a negative field length. This input validation vulnerability can lead to a denial of service (DoS) due to a slice bounds out of range panic.