Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-14669
By Stav Salman |
13 August 2026
PostgreSQL to_char(timestamptz) heap overflow enables OS-level code execution via POSIX timezone abbreviation
Heap buffer overflow in PostgreSQL to_char(timestamptz) allows a party that can choose the timezone to trigger memory corruption and execute arbitrary code as the OS user running the DB by supplying a long POSIX timezone abbreviation. Affects PostgreSQL < 18.5, < 17.11, < 16.15, < 15.19, < 14.24. Upgrade to 18.5/17.11/16.15/15.19/14.24 or later.