Binary Array Decoder Vulnerability in Eclipse Vert.x pg-client

CVE-2026-102463

What is CVE-2026-102463?

The binary array decoder within the io.vertx:vertx-pg-client component of Eclipse Vert.x presents a vulnerability allowing a malicious PostgreSQL server or an intercepting attacker to exploit excessively large array dimension values. This can trigger significant heap allocation attempts in the affected client, leading to crashes through OutOfMemoryError. It’s essential for users and administrators to review their configurations and apply necessary mitigations to ensure system stability.

References