Buffer Over-read Vulnerability in PostgreSQL Database Server

CVE-2025-4207

What is CVE-2025-4207?

A buffer over-read issue in PostgreSQL's GB18030 encoding validation could allow a database input provider to trigger a temporary denial of service. The vulnerability can result in process termination on platforms where a single-byte over-read can be exploited. This affects the core PostgreSQL database server as well as its libpq library, impacting various versions of the software. It is essential for users to upgrade to the latest, patched versions to mitigate this vulnerability.

References