Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-18022

pgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems

Description

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a pgvector

Default version status: unaffected

  • 0 to < 0.8.6affected

References