CVE-2021-32029: PostgreSQL

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.

Affected products

• PostgreSQL PostgreSQL: from 11.0, before 11.12 (fixed in 11.12); from 12.0, before 12.7 (fixed in 12.7); from 13.0, before 13.3 (fixed in 13.3)
• Red Hat JBoss Enterprise Application Platform: version 7.0.0 only

Published 2021-10-08. Last modified 2026-06-17.