CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120064
HIGHCVSS 7.5NVD feed
Published 2 November 2026 · tracked since 3 November 2026
Description
Several psqlODBC entry points use an application-supplied column number or row index as an array index without validating it. SQLBindCol with a column number above 32767 wraps the binding count negative and a later copy runs off the array. A negative SQL_DESC_COUNT on an application row descriptor u
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog