CVE-2025-4207

Summary

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Affected Software

VendorProductVersion RangeStatus
n/aPostgreSQL17 < 17.5affected
n/aPostgreSQL16 < 16.9affected
n/aPostgreSQL15 < 15.13affected
n/aPostgreSQL14 < 14.18affected
n/aPostgreSQL0 < 13.21affected

Weaknesses

  • CWE-126: Buffer Over-read

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References