CVE Catalog
CVE-2025-4207
MediumSummary
A buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to cause temporary denial of service on platforms where a 1-byte over-read leads to process termination. This affects the database server and libpq.
Risk Assessment
An attacker can crash the PostgreSQL server or applications using libpq, causing temporary service unavailability.
Recommendation
Update PostgreSQL to version 17.5, 16.9, 15.13, 14.18 or later, which include the fix.
Original NVD description (English source)
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14