Description
Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
Published: 2026-08-13
Score: 8.8 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Heap buffer overflow in PostgreSQL's PL/Perl interpreter arises when a tied hash is returned, allowing the function owner to execute arbitrary code as the operating system user running the database. The flaw is a classic buffer overflow (CWE-122) that can be triggered by a crafted function body, leading to remote code execution and full control over the database server.

Affected Systems

The vulnerability affects PostgreSQL, versions older than 18.5, 17.11, 16.15, 15.19, and 14.24. Users running any of those releases need to upgrade to the patched versions listed above or newer.

Risk and Exploitability

The CVSS score is 8.8, indicating a high severity, while no EPSS score is available, leaving the likelihood of exploitation uncertain. The vulnerability is not listed in the CISA KEV catalog. Attackers who can create or modify PL/Perl functions with a crafted body can exploit the buffer overflow, potentially running arbitrary code as the database server's operating system user.

Generated by OpenCVE AI on August 13, 2026 at 14:45 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade PostgreSQL to at least the patched releases: 18.5, 17.11, 16.15, 15.19, or 14.24, or any newer version.
  • If an upgrade cannot be performed immediately, restrict the creation and use of PL/Perl functions to trusted, minimally privileged users, or temporarily disable the plperl extension.
  • Implement monitoring and audit of PL/Perl function creation to detect and respond to suspicious functions.

Generated by OpenCVE AI on August 13, 2026 at 14:45 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 13 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Postgresql
Postgresql postgresql
Vendors & Products Postgresql
Postgresql postgresql

Thu, 13 Aug 2026 13:15:00 +0000

Type Values Removed Values Added
Description Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
Title PostgreSQL plperl tied object heap buffer overflow executes arbitrary code
Weaknesses CWE-122
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Postgresql Postgresql
cve-icon MITRE

Status: PUBLISHED

Assigner: PostgreSQL

Published:

Updated: 2026-08-13T15:35:41.530Z

Reserved: 2026-07-03T20:28:12.637Z

Link: CVE-2026-14670

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-13T13:17:44.407

Modified: 2026-08-13T13:17:44.407

Link: CVE-2026-14670

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T15:15:12Z

Weaknesses
  • CWE-122

    Heap-based Buffer Overflow