Attack arithmetic: how an integer overflow in PostgreSQL libpq leads to denial of service
swarm.ptsecurity.com | research | #cloud | #memory-safety | #denial-of-service | #postgresql | #integer-overflow | #libpq
Summary
An integer overflow in PostgreSQL libpq's PQescapeInternal() makes it allocate too little and write hundreds of MB past the buffer, segfaulting applications — a denial-of-service vulnerability.
- Published
- Collected
--- id: 5085 title: "Attack arithmetic: how an integer overflow in PostgreSQL libpq leads to denial of service" source_domain: swarm.ptsecurity.com source_url: "https://swarm.ptsecurity.com/attack-arithmetic-how-an-integer-overflow-in-postgresql-libpq-leads-to-denial-of-service/" published_at: "2026-03-10T14:00:22Z" tags: ["cloud", "memory-safety", "denial-of-service", "postgresql", "integer-overflow", "libpq"] phying_url: "https://phying.com/item/5085" lang: en --- # Attack arithmetic: how an integer overflow in PostgreSQL libpq leads to denial of service ## Summary An integer overflow in PostgreSQL libpq's PQescapeInternal() makes it allocate too little and write hundreds of MB past the buffer, segfaulting applications — a denial-of-service vulnerability. ## Intelligence Metadata - **Sources:** swarm.ptsecurity.com - **Published:** 2026-03-10T14:00:22Z - **Original:** https://swarm.ptsecurity.com/attack-arithmetic-how-an-integer-overflow-in-postgresql-libpq-leads-to-denial-of-service/ - **Phying News:** https://phying.com/item/5085