{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-103484", "assignerOrgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "state": "PUBLISHED", "assignerShortName": "PostgreSQL", "dateReserved": "2026-09-30T16:24:57.108Z", "datePublished": "2026-10-01T19:49:03.670Z", "dateUpdated": "2026-10-01T19:58:48.937Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "shortName": "PostgreSQL", "dateUpdated": "2026-10-01T19:49:03.670Z"}, "title": "pgvector buffer overflow in IVFFlat index build", "descriptions": [{"lang": "en", "value": "IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution."}], "affected": [{"defaultStatus": "unaffected", "product": "pgvector", "vendor": "n/a", "versions": [{"lessThan": "0.8.7", "status": "affected", "version": "0", "versionType": "semver"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-787", "type": "CWE", "description": "Out-of-bounds Write"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-1284", "type": "CWE", "description": "Improper Validation of Specified Quantity in Input"}]}], "references": [{"url": "https://github.com/pgvector/pgvector/issues/1036"}, {"url": "https://github.com/pgvector/pgvector/commit/ee00d39ab30c2a7cf9510abf9288c624d91db156"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH"}}], "configurations": [{"lang": "en", "value": "attacker has permission to create an IVFFlat index"}], "credits": [{"lang": "en", "value": "Thanks to Emanuele Barbeno, Cyrill Bannwart, Urs Mueller, and Lukasz D of Compass Security for reporting this."}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-01T19:58:32.132643Z", "id": "CVE-2026-103484", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-01T19:58:48.937Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-103484", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-01T19:58:32.132643Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-01T19:58:39.315Z"}}], "cna": {"title": "pgvector buffer overflow in IVFFlat index build", "credits": [{"lang": "en", "value": "Thanks to Emanuele Barbeno, Cyrill Bannwart, Urs Mueller, and Lukasz D of Compass Security for reporting this."}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "n/a", "product": "pgvector", "versions": [{"status": "affected", "version": "0", "lessThan": "0.8.7", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/pgvector/pgvector/issues/1036"}, {"url": "https://github.com/pgvector/pgvector/commit/ee00d39ab30c2a7cf9510abf9288c624d91db156"}], "descriptions": [{"lang": "en", "value": "IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "Out-of-bounds Write"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1284", "description": "Improper Validation of Specified Quantity in Input"}]}], "configurations": [{"lang": "en", "value": "attacker has permission to create an IVFFlat index"}], "providerMetadata": {"orgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "shortName": "PostgreSQL", "dateUpdated": "2026-10-01T19:49:03.670Z"}}}, "cveMetadata": {"cveId": "CVE-2026-103484", "state": "PUBLISHED", "dateUpdated": "2026-10-01T19:58:48.937Z", "dateReserved": "2026-09-30T16:24:57.108Z", "assignerOrgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "datePublished": "2026-10-01T19:49:03.670Z", "assignerShortName": "PostgreSQL"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "pgvector", "vendor": "n/a", "versions": [{"lessThan": "0.8.7", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution."}], "id": "CVE-2026-103484", "lastModified": "2026-10-02T18:53:46.583", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-103484", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-01T19:58:32.132643Z", "version": "2.0.3"}}]}, "published": "2026-10-01T20:17:23.213", "references": [{"source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "url": "https://github.com/pgvector/pgvector/commit/ee00d39ab30c2a7cf9510abf9288c624d91db156"}, {"source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "url": "https://github.com/pgvector/pgvector/issues/1036"}], "sourceIdentifier": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}, {"lang": "en", "value": "CWE-1284"}], "source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "type": "Secondary"}]}

{"bugzilla": {"description": "pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build", "id": "2544842", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544842"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-787", "details": ["A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat (IVFFlat) index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the database server."], "mitigation": {"lang": "en:us", "value": "Restrict schema creation permissions to prevent untrusted database accounts from building indexes, or remove the optional pgvector package if vector indexing is not needed."}, "name": "CVE-2026-103484", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "postgresql:16/pgvector", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "postgresql:18/pgvector", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-10-01T19:49:03Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-103484\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-103484\nhttps://github.com/pgvector/pgvector/commit/ee00d39ab30c2a7cf9510abf9288c624d91db156\nhttps://github.com/pgvector/pgvector/issues/1036"], "statement": "This vulnerability is rated as an Important severity issue because an authenticated database user with permissions to build vector indexes can trigger memory corruption within the PostgreSQL server process, potentially enabling arbitrary code execution. While exploiting the memory corruption allows execution of arbitrary code with the privileges of the postgres service account, the impact is bounded to authenticated database accounts that have rights to create tables and indexes. Deployments where untrusted clients cannot create database objects or where the optional pgvector extension is not enabled are not exposed to this risk.", "threat_severity": "Important"}