An out-of-bounds read exists in the TDS RPC procedure-name parser of Babelfish for PostgreSQL as well as in Amazon Aurora PostgreSQL with Babelfish. The vulnerability allows remote authenticated users to issue a malformed TDS RPC request to the default TDS port (1433) in order to read data from adjacent memory. This memory disclosure could expose sensitive information stored in the PostgreSQL process space, and in some circumstances the read operation may trigger a crash, causing a denial of service. The primary weakness identified is a buffer under-read, with the attacker able to recover confidential data if the application or host environment does not protect the bounds of the memory region.

AWS Babelfish for PostgreSQL extensions version 1.0‑1.5, 2.1‑2.15, 3.1‑3.12, 4.0‑4.8, 5.1‑5.4 and Amazon Aurora PostgreSQL with Babelfish of the corresponding versions are affected. The vulnerability is present across multiple major releases and is specifically tracked for Aurora PostgreSQL variations up to version 18.4.1 (6.1.0).

The CVSS base score is 7.2, indicating a high severity. No EPSS score is available, so the likelihood of exploitation is not quantified, but the vulnerability requires only authenticated database access and can be triggered by sending crafted TDS messages over the network. Because it is not listed in the CISA KEV catalog, there is no confirmed exploitation observed in the wild yet, yet the impact if exploited is significant due to potential data leakage and service interruption.