CVE-2026-119924

Vendor

AWS, Amazon

Product

babelfish-for-postgresql, Amazon Aurora PostgreSQL with Babelfish

CVSS v3.1

8.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness

CWE-125

Exposure class

Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   AWS bulletin AWS 4h ago

   CVE-2026-119923 and CVE-2026-119924: Issues with Babelfish for Aurora PostgreSQL

   Bulletin ID: 2026-166-AWS Publication Date: 11/06/2026 10:00 AM PST Description: We identified two issues in the Babelfish TDS protocol layer: - CVE-2026-119923: A memory-safety issue in the TDS connection-handshake handling…

   CVE-2026-119923CVE-2026-119924 Amazon Web Services
2. 30
   CVE NVD 3h ago

   An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8…

   An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote…

   CVSS 8.1 CVE-2026-119924 AWS Amazon