EUVD-2026-50474
GHSA-87hg-xjfg-qh5r
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-reachable DB (AV:N) but requires an authenticated user (PR:L) and the uncommon 32-bit platform plus reliable heap overflow, so AC:H rather than the published AC:L.
Primary rating from Vendor (PostgreSQL).
CVSS VectorVendor: PostgreSQL
Lifecycle Timeline
4DescriptionCVE.org
Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.
AnalysisAI
Out-of-bounds write in the pgvector PostgreSQL extension (versions before 0.8.6) lets an authenticated database user trigger an integer wraparound during IVFFlat index construction, corrupting heap memory in the backend process and potentially achieving arbitrary code execution. The flaw is exploitable only on 32-bit systems, where size calculations in the k-means clustering routine overflow the Size type. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Technical ContextAI
pgvector is a widely used PostgreSQL extension that adds vector data types and approximate-nearest-neighbor indexes (IVFFlat and HNSW) for embedding and similarity search workloads. The bug is a classic CWE-190 integer overflow/wraparound: in ivfkmeans.c, the ElkanKmeans routine computed allocation sizes such as sizeof(float) * numCenters * dimensions and sizeof(float) * numSamples * numCenters using native multiplication on 32-bit Size values. With attacker-influenced dimensions/sample/center counts, these products wrap around to a small value, causing an undersized allocation followed by out-of-bounds writes during index build. The fix (commit 636a92a) replaces raw arithmetic with PostgreSQL's overflow-checked mul_size()/add_size() helpers, which raise an error instead of silently wrapping. On 64-bit platforms the 64-bit Size type is large enough that the products do not wrap, which is why only 32-bit systems are affected.
RemediationAI
Upgrade pgvector to version 0.8.6 or later, which incorporates the overflow-checked allocation fix (commit 636a92a3395d2e036ffd40d07aeb400a708ae104; see issue https://github.com/pgvector/pgvector/issues/1006). If immediate upgrade is not possible, the most effective compensating control is to run the database server on a 64-bit build, which eliminates the wraparound entirely; where that is not feasible, restrict who can create indexes by revoking CREATE privilege on schemas and limiting table ownership so only trusted roles can build IVFFlat indexes, and avoid exposing IVFFlat index creation to untrusted or multi-tenant users. The trade-off of privilege restriction is reduced self-service for legitimate users who need to manage their own vector indexes.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-190 – Integer Overflow or Wraparound
View allVendor StatusVendor
SUSE
Severity: Important| Product | Status |
|---|---|
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Affected |
| SUSE Linux Enterprise Module for Server Applications 15 SP7 | Affected |
| SUSE Linux Enterprise Server 15 SP7 | Affected |
| SUSE Linux Enterprise Server 16.0 | Affected |
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| openSUSE Leap 16.0 | Affected |
| SUSE Linux Enterprise Module for Server Applications 15 SP6 | Affected |
| SUSE Linux Enterprise Server 15 SP6 | Affected |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP6 | Affected |
| openSUSE Leap 15.6 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today