High · 8.8 CVE-2026-18022 EUVD-2026-50474GHSA-87hg-xjfg-qh5r

pgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems

Published Jul 29, 2026 · Updated Oct 7, 2026 · Assigned by PostgreSQL

Package: pgvector Package: pgvector Ecosystem: Debian Ecosystem: Ubuntu

Description

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.

Affected products

Vendor	Product	Affected	Fixed
—	pgvector	< 0.8.6	0.8.6

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	pgvector	0.8.6-1	—
Debian 13	pgvector	No fix yet	—

Ubuntu