Skip to content
OpenAdvisories
High ELSA-2026-88359 1 CVE

Important: postgresql16-pgvector security update (Oracle Linux 10)

Published Oct 22, 2026 · Updated Oct 22, 2026

Ecosystem: Oracle Linux

Summary

[0.8.7-1]
- CVE-2026-103484 postgresql16-pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build
execution via out-of-bounds write during IVFFlat index build
- Resolves: RHEL-282041

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 pgvector 0:0.8.7-1.el10_2

Vulnerabilities 1

  • High 8.8
    CVE-2026-103484

    pgvector buffer overflow in IVFFlat index build

    IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.

    pgvector pgvector Debian Ubuntu