CVE-2026-14678 | PostgreSQL up to 18.4 pg_trgm picksplit out-of-bounds (WID-SEC-2026-2844)

A vulnerability marked as critical has been reported in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4. Affected is the function picksplit of the component pg_trgm. Performing a manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2026-14678. The attack can be initiated remotely. There is not any exploit available. It... Weiterlesen