PostgreSQL Heap-based Buffer Overflow Vulnerability - CVE-2026-14669
Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.5 17.11 16.15 15.19 and 14.24 are affected.