Skip to content
OpenAdvisories
High ELSA-2026-88360 1 CVE

Important: postgresql18-pgvector security update (Oracle Linux 10)

Published Oct 22, 2026 · Updated Oct 22, 2026

Ecosystem: Oracle Linux

Summary

[0.8.7-0.1]
- CVE-2026-103484 postgresql18-pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build
execution via out-of-bounds write during IVFFlat index build
- Resolves: RHEL-282040

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 postgresql18-pgvector 0:0.8.7-1.el10_2

Vulnerabilities 1

  • High 8.8
    CVE-2026-103484

    pgvector buffer overflow in IVFFlat index build

    IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.

    pgvector pgvector Debian Ubuntu