CVE-2025-12818
Medium · 5.9CVSS
5.9
EPSS
0.4%
Published
Nov 13, 2025
CISA due date
—
The record
Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Bitnami | postgresql | 0 | 13.23.0 |
| Mageia:9 | postgresql13 | 0 | 13.23-1.mga9 |
| Mageia:9 | postgresql15 | 0 | 15.15-1.mga9 |
| SUSE:Enterprise Storage 7.1 | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Enterprise Storage 7.1 | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | postgresql | 0 | 18-150600.17.9.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | postgresql16 | 0 | 16.11-150600.16.25.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | postgresql17 | 0 | 17.7-150600.13.19.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | postgresql18 | 0 | 18.1-150600.13.3.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | postgresql | 0 | 18-150700.23.3.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | postgresql17 | 0 | 17.7-150600.13.19.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | postgresql18 | 0 | 18.1-150600.13.3.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | postgresql14 | 0 | 14.20-150600.16.23.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | postgresql15 | 0 | 15.15-150600.16.23.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | postgresql14 | 0 | 14.20-150600.16.23.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | postgresql15 | 0 | 15.15-150600.16.23.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | postgresql16 | 0 | 16.11-150600.16.25.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | postgresql | 0 | 18-150600.17.9.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | postgresql14 | 0 | 14.20-150600.16.23.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | postgresql16 | 0 | 16.11-150600.16.25.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | postgresql17 | 0 | 17.7-150600.13.19.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | postgresql18 | 0 | 18.1-150600.13.3.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | postgresql | 0 | 18-150700.23.3.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | postgresql14 | 0 | 14.20-150600.16.23.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | postgresql16 | 0 | 16.11-150600.16.25.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | postgresql17 | 0 | 17.7-150600.13.19.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | postgresql18 | 0 | 18.1-150600.13.3.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | postgresql | 0 | 18-150600.17.9.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | postgresql16 | 0 | 16.11-150600.16.25.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | postgresql17 | 0 | 17.7-150600.13.19.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | postgresql18 | 0 | 18.1-150600.13.3.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP7 | postgresql | 0 | 18-150700.23.3.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP7 | postgresql16 | 0 | 16.11-150600.16.25.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP7 | postgresql17 | 0 | 17.7-150600.13.19.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP7 | postgresql18 | 0 | 18.1-150600.13.3.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | postgresql13 | 0 | 13.23-3.69.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | postgresql14 | 0 | 14.20-3.63.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | postgresql15 | 0 | 15.15-3.47.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | postgresql16 | 0 | 16.11-3.35.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | postgresql13 | 0 | 13.23-3.69.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | postgresql14 | 0 | 14.20-3.63.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | postgresql15 | 0 | 15.15-3.47.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | postgresql16 | 0 | 16.11-3.35.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Manager Proxy LTS 4.3 | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Manager Proxy LTS 4.3 | postgresql16 | 0 | 16.11-150200.5.35.1 |
| SUSE:Manager Server LTS 4.3 | postgresql15 | 0 | 15.15-150200.5.49.2 |
| SUSE:Manager Server LTS 4.3 | postgresql16 | 0 | 16.11-150200.5.35.1 |
| openSUSE:Leap 15.6 | postgresql | 0 | 18-150600.17.9.1 |
| openSUSE:Leap 15.6 | postgresql13 | 0 | 13.23-150600.14.14.1 |
| openSUSE:Leap 15.6 | postgresql14 | 0 | 14.20-150600.16.23.1 |
| openSUSE:Leap 15.6 | postgresql15 | 0 | 15.15-150600.16.23.1 |
| openSUSE:Leap 15.6 | postgresql16 | 0 | 16.11-150600.16.25.1 |
| openSUSE:Leap 15.6 | postgresql17 | 0 | 17.7-150600.13.19.1 |
| openSUSE:Leap 15.6 | postgresql18 | 0 | 18.1-150600.13.3.1 |
| openSUSE:Leap 16.0 | postgresql | 0 | 18-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql13 | 0 | 13.23-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql13-pgaudit | 0 | 1.5.3-160000.3.1 |
| openSUSE:Leap 16.0 | postgresql13-pgvector | 0 | 0.8.1-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql14 | 0 | 14.21-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql14-pgaudit | 0 | 1.6.3-160000.3.1 |
| openSUSE:Leap 16.0 | postgresql14-pgvector | 0 | 0.8.1-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql15 | 0 | 15.16-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql15-pgaudit | 0 | 1.7.1-160000.3.1 |
| openSUSE:Leap 16.0 | postgresql15-pgvector | 0 | 0.8.1-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql16 | 0 | 16.11-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql16-pgaudit | 0 | 16.1-160000.3.1 |
| openSUSE:Leap 16.0 | postgresql16-pgvector | 0 | 0.8.1-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql17 | 0 | 17.7-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql17-pgaudit | 0 | 17.1-160000.3.1 |
| openSUSE:Leap 16.0 | postgresql17-pgvector | 0 | 0.8.1-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql18 | 0 | 18.1-160000.1.2 |
| openSUSE:Leap 16.0 | postgresql18-mini | 0 | 18.1-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql18-pgaudit | 0 | 18.0-160000.3.1 |
| openSUSE:Leap 16.0 | postgresql18-pgvector | 0 | 0.8.1-160000.1.1 |
| openSUSE:Tumbleweed | postgresql13 | 0 | 13.23-1.1 |
| openSUSE:Tumbleweed | postgresql14 | 0 | 14.20-1.1 |
| openSUSE:Tumbleweed | postgresql15 | 0 | 15.15-1.1 |
| openSUSE:Tumbleweed | postgresql16 | 0 | 16.11-1.1 |
| openSUSE:Tumbleweed | postgresql17 | 0 | 17.7-1.1 |
| openSUSE:Tumbleweed | postgresql18 | 0 | 18.1-1.1 |
Related vulnerabilities
- CVE-2025-12817 Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to… Also affects postgresql
- CVE-2025-1094 Improper neutralization of quoting syntax in PostgreSQL libpq functions… Also affects postgresql
- CVE-2024-10979 Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged… Also affects postgresql
- CVE-2024-10978 Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to… Also affects postgresql
- CVE-2024-10977 Client use of server error message in PostgreSQL allows a server not trusted under… Also affects postgresql
- CVE-2024-10976 Incomplete tracking in PostgreSQL of tables with row security allows a reused query to… Also affects postgresql
- CVE-2024-4317 Missing authorization in PostgreSQL built-in views pg_stats_ext and pg_stats_ext_exprs… Also affects postgresql
- CVE-2023-5868 A memory disclosure vulnerability was found in PostgreSQL that allows remote users to… Also affects postgresql