CVE-2026-6666

Description

A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field.

PUBLISHED Reserved 2026-04-20 | Published 2026-05-09 | Updated 2026-05-09 | Assigner PostgreSQL

Problem types

NULL Pointer Dereference

Credits

Thanks to HarutoKimura for finding and reporting this problem. finder

References

www.pgbouncer.org/changelog.html

cve.org (CVE-2026-6666)

nvd.nist.gov (CVE-2026-6666)

Download JSON