Logo
vulnerabilityCVE-2026-6474
Name
CVE-2026-6474
Source
NVD ( link)Debian ( link)
Description
Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
postgresql
Exploitable

Vulnerability Ratings#


4.3
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
17.10
Not Affected
buildroot
master
18.4
Not Affected
openwrt
master
18.4-r1
Not Affected
yocto
kirkstone
14.22
Exploitable
yocto
master
17.10
Not Affected
yocto
scarthgap
16.14
Not Affected