Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-103484

pgvector buffer overflow in IVFFlat index build

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
PostgreSQL

Description

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a pgvector

Default version status: unaffected

  • 0 to < 0.8.7affected

References