CVE-2025-12818Disclosure

LOWCVSS 5.9 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

https://www.postgresql.org/support/security/CVE-2025-12818/

Weakness type (CWE)

CWE-190

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

Public PoC is present in monitored signal
2 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-03-10); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets4 URLs

By indicator

Full discourse2 posts

PT SWARM@ptswarm214d
Disclosure
🐘 Attack arithmetic: how an integer overflow in PostgreSQL libpq leads to denial of service. Our researcher Aleksey Solovev discovered the vulnerability CVE-2025-12818, which may cause a product using the libpq PostgreSQL library to crash. https://swarm.ptsecurity.com/attack-arithmetic-how-an-integer-overflow-in-postgresql-libpq-leads-to-denial-of-service/ https://t.co/os1uWOochH
Post summary
The post announces a newly discovered integer overflow vulnerability (CVE-2025-12818) in PostgreSQL libpq that can cause denial of service, with technical details and a link to further information.
01002573.0K
18.7K followersView on X
Mr. OS@ksg93rd211d
Disclosure
#exploit #AppSec 1⃣. CVE-2026-28292: simple-git RCE - Case-Sensitivity Bypass https://www.codeant.ai/security-research/simple-git-remote-code-execution-cve-2026-28292 // A regex bug in simple-git 3.15.0 - 3.32.3 allows bypassing CVE patches and enables RCE via uppercase protocol variants 2⃣. CVE-2025-12818: https://swarm.ptsecurity.com/attack-arithmetic-how-an-integer-overflow-in-postgresql-libpq-leads-to-denial-of-service Attack arithmetic - how an integer overflow in PostgreSQL libpq leads to DoS // A 2025 PostgreSQL libpq integer overflow in PQescapeInternal allows memory corruption and DoS, affecting applications like PHP's PDO driver 3⃣. CVE-2026-20820: https://cravaterouge.com/articles/cve-2026-20820 Chasing the Ghost in the Log // A heap-based BoF in Windows clfs.sys caused by a length calculation bug, leading to potential system crashes but unlikely to enable privilege escalation
Post summary
The post lists three CVEs, offering technical vulnerability details for each, but does not provide proof‑of‑concepts, exploit code, active exploitation evidence, or patch information.
0301831.2K
3.2K followersView on X

Explore more

Back to dashboard