CVE-2026-116317
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Nov 12, 2026
Vendor
unknown
Description
Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.