Integer Overflow or Wraparound The advisory has been revoked - it doesn't affect any version of package postgresql (opens in a new tab)

Threat Intelligence

Trending on 𝕏

1.01% (60^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL7-POSTGRESQL-17159763
published4 Jun 2026
disclosed14 May 2026

Report a new vulnerability Found a mistake?

Introduced: 14 May 2026

CVE-2026-6473 (opens in a new tab) CWE-190 (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:7.

NVD Description

Note: Versions mentioned in the description apply only to the upstream postgresql package and not the postgresql package as distributed by RHEL.

Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user running the database. In applications that pass gigabyte-scale user inputs to the relevant database functions, the application input provider may achieve a segmentation fault. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.