CVE-2026-33816
Critical · CVSS 9.8github.com/jackc/pgx/v5 — Memory safety out-of-bounds write (CWE-787)
- CVSS
- 9.8
- nvd
- EPSS
- 0.56%
- 44th pct
- KEV
- No
- Class
- oss containerizable
- NVD-CWE-noinfo, CWE-787
Description
Memory-safety vulnerability in github.com/jackc/pgx/v5.
Search profile — drives PoC discovery
Symbols pgxpgx/v5jackc/pgxGO-2026-4772
Keywords CVE-2026-33816jackc pgx v5 memory safetypgx out-of-bounds writeGO-2026-4772 PoCjackc pgx CWE-787pgx golang memory corruption
Versions: github.com/jackc/pgx/v5 (all versions prior to fix)
Affected packages
| Go | github.com/jackc/pgx/v5 | 0 → 5.9.0 |
References
- https://pkg.go.dev/vuln/GO-2026-4772
- https://access.redhat.com/errata/RHSA-2026:11070
- https://access.redhat.com/errata/RHSA-2026:11217
- https://access.redhat.com/errata/RHSA-2026:13791
- https://access.redhat.com/errata/RHSA-2026:13829
- https://access.redhat.com/errata/RHSA-2026:13907
- https://access.redhat.com/errata/RHSA-2026:17789
- https://access.redhat.com/errata/RHSA-2026:19137
- https://access.redhat.com/errata/RHSA-2026:22423
- https://access.redhat.com/errata/RHSA-2026:24475
- https://access.redhat.com/errata/RHSA-2026:24479
- https://access.redhat.com/errata/RHSA-2026:24482
Status: enriched · ingested 2026-06-30T06:00:22.000Z · profiled 2026-07-01T06:30:14.000Z