high7.5
CVE-2026-6664
An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash.
Impact
An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pgbouncer | Pgbouncer | before 1.25.2 |