CVE-2026-18022
pgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems
Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.
CVSS 3.1 · 8.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products