CVE-2026-32286
EUVD-2026-1634726.03.2026, 20:16
The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| jackc | pgproto3 | 2.0.0 ≤ 𝑥 ≤ 2.3.3 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:165.1-2.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:165.1-2.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Multicluster Global Hub 1.3.4 | 1779210675 ≤ 𝑥 < * | ADP |
| Red Hat | Multicluster Global Hub 1.3.4 | 1779210608 ≤ 𝑥 < * | ADP |
| Red Hat | Multicluster Global Hub 1.3.4 | 1779209992 ≤ 𝑥 < * | ADP |
| Red Hat | Multicluster Global Hub 1.5.4 | 1778867753 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security 4.8 | 1777307791 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security 4.8 | 1777307791 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat multicluster global hub 1.4.4 | 1779579439 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat multicluster global hub 1.6.0 | 1780167118 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.1 | 1776736910 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.12 | 1776752646 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.14 | 1779689392 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.15 | 1780891395 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.16 | 1779204086 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.17 | 1779922205 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.9 | 1776782369 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
- CWE-129 - Improper Validation of Array IndexThe product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
- CWE-1285 - Improper Validation of Specified Index, Position, or Offset in InputThe product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.
References