CVE-2026-120057
High · 7.5CVSS
7.5
EPSS
0.2%
Published
Nov 2, 2026
CISA due date
—
The record
psqlODBC copies the reply to a large-object read (loread) into the application's buffer using the length sent by the server, without comparing it to the buffer size. A server not trusted under current SSL settings, or a man-in-the-middle, can return more bytes than the buffer holds and overwrite adjacent memory in the client process with server-chosen bytes. Fetching any large-object column is sufficient to trigger it. Versions before psqlODBC 18.00.0006 are affected.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121603 Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that… CWE-120
- CVE-2026-109161 Insufficient bounds checking in the Digital I/O function may allow a remote attacker with… CWE-120
- CVE-2026-76955 A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions… CWE-120
- CVE-2026-106804 A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn… CWE-120
- CVE-2026-120241 A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC… CWE-120
- CVE-2026-120226 A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll… CWE-120
- CVE-2026-119146 ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the… CWE-120
- CVE-2026-57191 Asterisk is an open source private branch exchange and telephony toolkit. CWE-120