Description
Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
Published: 2026-08-13
Score: 4.3 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 13 Aug 2026 13:15:00 +0000

Type Values Removed Values Added
Description Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
Title PostgreSQL pg_trgm picksplit reads past end of buffer
Weaknesses CWE-126
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: PostgreSQL

Published:

Updated: 2026-08-13T15:36:52.887Z

Reserved: 2026-07-03T20:28:17.298Z

Link: CVE-2026-14678

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-13T13:17:45.150

Modified: 2026-08-13T13:17:45.150

Link: CVE-2026-14678

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T14:45:03Z

Weaknesses