CVE-2019-10129: PostgreSQL

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

A vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned table, an attacker can read arbitrary bytes of server memory. In the default configuration, any user can create a partitioned table suitable for this attack. (Exploit prerequisites are the same as for CVE-2018-1052).

Affected products

• PostgreSQL PostgreSQL: from 11.0, before 11.3 (fixed in 11.3)

Published 2019-07-30. Last modified 2026-06-17.