CVE-2026-120059

A flaw was found in postgresql-odbc. When processing updatable cursors, the driver improperly uses a server-provided column name as a format string when constructing query statements. A malicious database server or an attacker able to create a table with a specially crafted column name can cause the driver to read unrelated client memory. This issue can lead to information disclosure if sensitive client memory is transmitted to the server, or an application crash resulting in a Denial of Service (DoS).

This vulnerability is classified as Moderate severity because exploitation requires specific prerequisites, specifically an application querying an untrusted schema using updatable cursors on tables lacking object identifiers but containing auto-increment integer columns. In standard Red Hat Enterprise Linux deployments, applications typically connect to authenticated, trusted database instances with controlled schemas, substantially reducing the likelihood of encountering hostile column identifiers. While successful exploitation can expose client memory or terminate the connecting client process, it does not directly enable arbitrary code execution or compromise database server integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.