CVE-2024-10977

score

<0.1

cvss

3.1

epss

0.4%

published

2024-11-14

kev added

—

first seen

2026-10-21

PostgreSQL versions before 12.21, 13.17, 14.14, 15.9, 16.5, and 17.1 contain a server error message handling issue caused by untrusted client use, letting attackers send arbitrary non-NUL bytes to libpq applications, exploit requires man-in-the-middle position.