Description
Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
Published: 2026-08-13
Score: 4.3 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Buffer over-read in the pg_trgm index picksplit function of PostgreSQL allows a database maintainer to read data past the end of a heap buffer. The error can leak limited memory contents via the pattern of index split choices, potentially exposing sensitive information. This flaw is a classic buffer over-read with CWE-126 and does not provide arbitrary code execution.

Affected Systems

PostgreSQL databases running versions before 18.5, 17.11, 16.15, 15.19, or 14.24 are vulnerable. Users of older PostgreSQL releases should check their version against these thresholds.

Risk and Exploitability

The CVSS score of 4.3 indicates a moderate risk. EPSS is not available, and the vulnerability is not listed in CISA KEV. Exploitation likely requires local table maintainer privileges, as the attacker must trigger an index split operation using pg_trgm. The vulnerability does not appear exploitable over the network default.

Generated by OpenCVE AI on August 13, 2026 at 14:42 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update PostgreSQL to the latest supported release (18.5+, 17.11+, 16.15+, 15.19+, or 14.24+).
  • Rebuild all pg_trgm indexes after the upgrade to ensure the fix takes effect.
  • If an upgrade is not immediately possible, limit table maintainer privileges on databases that use pg_trgm to prevent unauthorized index manipulations.

Generated by OpenCVE AI on August 13, 2026 at 14:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 13 Aug 2026 13:15:00 +0000

Type Values Removed Values Added
Description Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
Title PostgreSQL pg_trgm picksplit reads past end of buffer
Weaknesses CWE-126
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: PostgreSQL

Published:

Updated: 2026-08-13T15:36:52.887Z

Reserved: 2026-07-03T20:28:17.298Z

Link: CVE-2026-14678

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-13T13:17:45.150

Modified: 2026-08-13T13:17:45.150

Link: CVE-2026-14678

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T14:45:03Z

Weaknesses