Buffer Over-Read in PostgreSQL pg_trgm Extension

Executive Summary

This is a buffer over-read vulnerability in PostgreSQL's pg_trgm extension. It occurs in the picksplit function, where the system reads past the end of a heap buffer. This could allow a table maintainer to infer limited memory values by observing how index splits are chosen.

Useful 0 Not Useful 0

Detection Guidance

Check PostgreSQL version with 'psql --version' or 'SELECT version();'. If running versions before 18.5, 17.11, 16.15, 15.19, or 14.24, the system is vulnerable. Review pg_trgm extension usage in databases.

Useful 0 Not Useful 0

Impact Analysis

If you maintain PostgreSQL tables with the pg_trgm extension, an attacker with low privileges could exploit this to infer limited memory values. This might expose some internal system information but does not allow arbitrary code execution or data modification.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade PostgreSQL to patched versions (18.5, 17.11, 16.15, 15.19, or 14.24). Disable pg_trgm extension if not required. Apply security patches immediately.

Useful 0 Not Useful 0