Cyber Posture

CVE-2026-6473

High

Published: 14 May 2026

Published
14 May 2026
Modified
14 May 2026
KEV Added
—
Patch
—
CVSS Score 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score N/A
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-6473 is a high-severity Integer Overflow or Wraparound (CWE-190) vulnerability in Postgresql (inferred from references). Its CVSS base score is 8.8 (High).

Operationally, it is not currently listed in the CISA KEV catalog.

NVD Description

Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user running the database. In applications that pass…

more

gigabyte-scale user inputs to the relevant database functions, the application input provider may achieve a segmentation fault. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

Deeper analysisAI

Automated synthesis unavailable for this CVE.

Details

CWE(s)
CWE-190

Affected Products

Postgresql
—
inferred from references and description; NVD did not file a CPE for this CVE

References