CVE-2026-18022 — pgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems
Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit …
Published: 2026-07-29 · CVSS: 8.8 · CVSS 3.1
Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7