Cursor Vulnerability in psqlODBC by PostgreSQL

CVE-2026-120059

What is CVE-2026-120059?

The psqlODBC driver is susceptible to a vulnerability that arises when it processes column names from an updatable cursor over a table without OIDs. If an auto-incrementing int4 column is involved, the driver improperly handles the column's name, allowing the inclusion of format directives in a printf-style format string. This misconfiguration could lead to exploitation, where an attacker can generate format strings that result in the driver accessing unrelated memory. Consequently, this behavior may allow an application crash or leak of sensitive information from client memory into the SQL query sent to the database. Additionally, the origin of the column name can either be a non-trusted server under current SSL settings or a malicious database user capable of creating tables read by the application.

References