Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-10-12T17:42:59 postgresql-odbc: postgresql-odbc: Denial of Service via integer wraparound in SQLBindParameter 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-124

Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to -32768. Binding parameter 32769 then writes about 2.5 MB of zeros starting 1.25 MB before the binding array, which crashes the application or leaves it running on a corrupted heap. Applications that build parameter lists from untrusted input, such as an IN (?, ?, ...) list, are exposed. Versions before psqlODBC 18.00.0005 are affected.

A flaw was found in postgresql-odbc. An integer wraparound vulnerability in the SQLBindParameter function allows an attacker who controls the number of parameters bound in a database query to corrupt heap memory. By binding an excessively large number of parameters on a single statement, an attacker can trigger out-of-bounds memory writes, leading to an application crash and a Denial of Service (DoS).

This vulnerability is rated as Moderate severity because successful exploitation requires an application utilizing the driver to bind more than 32,767 query parameters supplied by untrusted user input, which represents an atypical workload. Although the arithmetic wraparound corrupts process memory and causes the client application to crash, the impact is confined to client-side denial of service and does not compromise the underlying PostgreSQL database server. Deployments where client applications enforce input bounds or avoid constructing unbounded parameter lists are not exposed to this flaw. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat Enterprise Linux 10 Fix deferred postgresql-odbc Red Hat Enterprise Linux 6 Out of support scope postgresql-odbc Red Hat Enterprise Linux 7 Fix deferred postgresql-odbc Red Hat Enterprise Linux 8 Fix deferred postgresql-odbc Red Hat Enterprise Linux 9 Fix deferred postgresql-odbc https://www.cve.org/CVERecord?id=CVE-2026-109448 https://nvd.nist.gov/vuln/detail/CVE-2026-109448 https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-cmfx-rm3r-p2jr