PostgreSQL Memory Disclosure Vulnerability via Improper oidvector Validation

A vulnerability in PostgreSQL allows a database user to improperly disclose a few bytes of server memory due to inadequate validation of the 'oidvector' type. While it is theoretically possible for this memory disclosure to include confidential information, such scenarios appear unlikely. Affected versions include those prior to PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21.

Impact

Exploitation of this vulnerability leads to unauthorized memory disclosure, which could potentially be manipulated to extract sensitive information under certain conditions.

Remediation

Users can upgrade to PostgreSQL versions 18.2, 17.8, 16.12, 15.16, or 14.21 to address this vulnerability.