CVE-2026-2005
High · 8.8CVSS
8.8
EPSS
1.4%
Published
Feb 12, 2026
CISA due date
—
The record
Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | postgresql-13 | 0 | 13.23-r5 |
| Mageia:9 | postgresql15 | 0 | 15.16-1.mga9 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | postgresql14 | 0 | 14.22-150200.5.69.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | postgresql15 | 0 | 15.17-150200.5.54.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | postgresql14 | 0 | 14.22-150200.5.69.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | postgresql15 | 0 | 15.17-150200.5.54.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | postgresql15 | 0 | 15.17-150200.5.54.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | postgresql15 | 0 | 15.17-150200.5.54.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | postgresql17 | 0 | 17.9-150600.13.24.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | postgresql18 | 0 | 18.3-150600.13.8.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | postgresql14 | 0 | 14.22-150600.16.28.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | postgresql15 | 0 | 15.17-150600.16.28.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | postgresql16 | 0 | 16.13-150600.16.30.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | postgresql14 | 0 | 14.22-150600.16.28.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | postgresql16 | 0 | 16.13-150600.16.30.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | postgresql17 | 0 | 17.9-150600.13.24.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | postgresql18 | 0 | 18.3-150600.13.8.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP7 | postgresql16 | 0 | 16.13-150600.16.30.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP7 | postgresql17 | 0 | 17.9-150600.13.24.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP7 | postgresql18 | 0 | 18.3-150600.13.8.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | postgresql14 | 0 | 14.21-3.66.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | postgresql15 | 0 | 15.16-3.50.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | postgresql16 | 0 | 16.12-3.38.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | postgresql14 | 0 | 14.22-150200.5.69.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | postgresql15 | 0 | 15.17-150200.5.54.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | postgresql14 | 0 | 14.22-150200.5.69.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | postgresql15 | 0 | 15.17-150200.5.54.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | postgresql14 | 0 | 14.22-150600.16.28.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | postgresql15 | 0 | 15.17-150600.16.28.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | postgresql16 | 0 | 16.13-150600.16.30.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | postgresql17 | 0 | 17.9-150600.13.24.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | postgresql18 | 0 | 18.3-150600.13.8.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | postgresql14 | 0 | 14.21-3.66.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | postgresql15 | 0 | 15.16-3.50.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | postgresql16 | 0 | 16.12-3.38.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | postgresql14 | 0 | 14.22-150200.5.69.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | postgresql15 | 0 | 15.17-150200.5.54.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | postgresql14 | 0 | 14.22-150200.5.69.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | postgresql15 | 0 | 15.17-150200.5.54.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | postgresql14 | 0 | 14.22-150600.16.28.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | postgresql15 | 0 | 15.17-150600.16.28.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | postgresql16 | 0 | 16.13-150600.16.30.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | postgresql17 | 0 | 17.9-150600.13.24.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | postgresql18 | 0 | 18.3-150600.13.8.1 |
| Wolfi | postgresql-13 | 0 | 13.23-r5 |
| openSUSE:Leap 15.6 | postgresql14 | 0 | 14.22-150600.16.28.1 |
| openSUSE:Leap 15.6 | postgresql15 | 0 | 15.17-150600.16.28.1 |
| openSUSE:Leap 15.6 | postgresql16 | 0 | 16.13-150600.16.30.1 |
| openSUSE:Leap 15.6 | postgresql17 | 0 | 17.9-150600.13.24.1 |
| openSUSE:Leap 15.6 | postgresql18 | 0 | 18.3-150600.13.8.1 |
| openSUSE:Leap 16.0 | postgresql14 | 0 | 14.21-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql15 | 0 | 15.16-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql16 | 0 | 16.13-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql17 | 0 | 17.9-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql18 | 0 | 18.3-160000.1.1 |
| openSUSE:Leap 16.0 | postgresql18-mini | 0 | 18.3-160000.1.1 |
| openSUSE:Tumbleweed | postgresql14 | 0 | 14.21-1.1 |
| openSUSE:Tumbleweed | postgresql15 | 0 | 15.16-1.1 |
| openSUSE:Tumbleweed | postgresql16 | 0 | 16.12-1.1 |
| openSUSE:Tumbleweed | postgresql17 | 0 | 17.8-1.1 |
| openSUSE:Tumbleweed | postgresql18 | 0 | 18.2-1.1 |
Related vulnerabilities
- CVE-2026-2003 Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose… Also affects postgresql-13
- CVE-2026-2004 Missing validation of type of input in PostgreSQL intarray extension selectivity… Also affects postgresql-13
- CVE-2026-2006 Missing validation of multibyte character length in PostgreSQL text manipulation allows a… Also affects postgresql-13
- CVE-2025-1094 Improper neutralization of quoting syntax in PostgreSQL libpq functions… Also affects postgresql-13
- CVE-2024-10979 Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged… Also affects postgresql-13
- CVE-2024-10978 Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to… Also affects postgresql-13
- CVE-2024-10977 Client use of server error message in PostgreSQL allows a server not trusted under… Also affects postgresql-13
- CVE-2024-10976 Incomplete tracking in PostgreSQL of tables with row security allows a reused query to… Also affects postgresql-13