psqlODBC before 18.00.0006 hit by stack buffer overflow
Original title: PostgreSQL security advisory (AV26-1115)
Canadian Centre for Cyber Security advisory AV26-1115 warns psqlODBC users must upgrade to 18.00.0006 to fix large-object read buffer overflow in ODBC escape parser.
As of November 2, 2026, PostgreSQL is affected by vulnerabilities in psqlODBC prior to 18.00.0006. The issue is a Large-object read overflows the application buffer ODBC escape parser stack buffer overflow. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
Unconfirmed: No CVE id or further details on exploitation stated in advisory
- - psqlODBC prior to 18.00.0006 affected
- - Vulnerability is Large-object read overflows the application buffer
- - ODBC escape parser stack buffer overflow
- - Cyber Centre issued serial AV26-1115
- - Updates available via provided web links
Impact: Stack buffer overflow in psqlODBC ODBC escape parser
- 1.Upgrade to psqlODBC 18.00.0006
- 2.Review provided web links and apply updates
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1115 Date: November 3, 2026 As of November 2, 2026, PostgreSQL is affected by vulnerabilities in the following product: psqlODBC Prior to 18. 00. 0006 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.