Row Cache Vulnerability in psqlODBC Product by PostgreSQL
CVE-2026-120058

7.5HIGH

Key Information:

Vendor

Postgresql
Status
Psqlodbc
Vendor
CVE Published:
2 November 2026

What is CVE-2026-120058?

The psqlODBC driver has a vulnerability where it incorrectly sizes its row cache based on the initial column count from a cursor's first result. This oversight allows a malicious server, not trusted under current SSL settings, to respond to subsequent FETCH requests with an increased column count, leading the driver to write tuple records beyond the allocated heap space. Additionally, scenarios where a keyset reply has fewer columns than anticipated can result in an underflow of unsigned field counts, particularly with UseDeclareFetch enabled. It is recommended that users upgrade to psqlODBC version 18.00.0006 or later to mitigate this issue.

Affected Version(s)

psqlODBC 0 < 18.00.0006

References

https://github.com/postgresql-interfaces/psqlodbc/securit...
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.