CVE-2026-2005

A heap buffer overflow vulnerability in PostgreSQL's pgcrypto module allows a ciphertext provider to execute arbitrary code with the privileges of the operating system user running the database. This issue affects versions prior to PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21.

‍