CVE-2026-3172
pgvector buffer overflow in parallel HNSW index build
Summary
pgvector buffer overflow in parallel HNSW index build
Original description
The description as published by the source.
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-3172 pgvector
- Ubuntu UBUNTU-CVE-2026-3172 pgvector
References
- advisory github.com
- advisory nvd.nist.gov
- report github.com