CVE-2026-14668
Received Received - Intake

Type Confusion in PostgreSQL Selectivity Estimator

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: PostgreSQL

Description
Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery appears possible. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-14668
EUVD
EUVD-2026-57835

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
postgresql postgresql to 18.5 (exc)
postgresql postgresql to 17.11 (exc)
postgresql postgresql to 16.15 (exc)
postgresql postgresql to 15.19 (exc)
postgresql postgresql to 14.24 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-843 The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a type confusion issue in PostgreSQL's ctid data type selectivity estimator. It allows an attacker who creates an object to view a calculation derived from an arbitrary 4-byte span of memory by using a non-ctid input. While the calculation loses some precision, it enables substantial recovery of memory values.

Detection Guidance

To detect this vulnerability, check your PostgreSQL version against affected releases (before 18.5, 17.11, 16.15, 15.19, 14.24). Use commands like 'psql --version' or 'SELECT version();' to verify. If vulnerable, update PostgreSQL immediately.

Impact Analysis

This vulnerability can allow unauthorized access to sensitive memory data, potentially leading to information disclosure. It may also impact system availability due to the high severity of the issue, as indicated by the CVSS score of 8.1.

Compliance Impact

This vulnerability could lead to unauthorized disclosure of sensitive data, which may violate GDPR's data protection requirements and HIPAA's confidentiality rules if exploited. The memory value recovery capability could expose personal or protected health information.

Mitigation Strategies

Immediately update PostgreSQL to versions 18.5, 17.11, 16.15, 15.19, or 14.24 or later to patch the type confusion vulnerability in the ctid data type's selectivity estimator.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-14668. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart