CVE-2026-6664 — PgBouncer integer overflow in PgBouncer network packet parsing
An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgB…
Published: 2026-05-09 · CVSS: 7.5 · CVSS 3.1
An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7