Babelfish for PostgreSQL TDS prelogin heap overflow (<=5.4)
CVE-2026-119923 Published on November 6, 2026

Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser
A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS commands as the database process user via a specially crafted malformed TDS prelogin packet to the TDS port. This record consolidates a related NULL-pointer-dereference finding in the same prelogin parser. To remediate this issue, we recommend users upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6.1 or later. As a workaround, restrict network access to the TDS port (default 1433). Customers using Amazon Aurora PostgreSQL with Babelfish should upgrade their cluster to Aurora PostgreSQL 13.9.16 (1.5.5), 13.23.3 (1.17.2), 14.6.16 (2.3.5), 14.17.8 (2.12.4), 14.18.6 (2.13.3), 14.19.5 (2.14.2), 14.20.5 (2.15.2), 14.22.3 (2.16.1), 14.23.1 (2.17.0), 15.10.8 (3.8.4), 15.12.8 (3.9.4), 15.13.6 (3.10.3), 15.14.5 (3.11.2), 15.15.5 (3.12.2), 15.17.3 (3.13.1), 15.18.1 (3.14.0), 16.8.8 (4.5.5), 16.9.6 (4.6.3), 16.10.5 (4.7.2), 16.11.5 (4.8.2), 16.13.3 (4.9.1), 16.14.1 (4.10.0), 17.4.8 (5.1.4), 17.5.6 (5.2.3), 17.6.5 (5.3.2), 17.7.5 (5.4.2), 17.9.3 (5.5.1), 17.10.1 (5.6.0), 18.3.4 (6.0.2), 18.4.1 (6.1.0) or later, and apply any pending maintenance to ensure they are on the latest patch.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-119923 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.

Attack Vector:

NETWORK

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

HIGH

Integrity Impact:

HIGH

Availability Impact:

HIGH

Weakness Type

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Products Associated with CVE-2026-119923

stack.watch emails you whenever new vulnerabilities are published in Aws Babelfish For Postgresql or Amazon Aurora Postgresql With Babelfish. Just hit a watch button to start following.

Aws Babelfish For Postgresql

  Watch

Amazon Aurora Postgresql With Babelfish

  Watch

Affected Versions

• Version 1.0, <= 1.5 is affected.
• Version 2.1, <= 2.15 is affected.
• Version 3.1, <= 3.12 is affected.
• Version 4.0, <= 4.8 is affected.
• Version 5.1, <= 5.4 is affected.

• Version 1.0.0 and below 1.5.5 is affected.
• Version 1.6.0 and below 1.17.2 is affected.
• Version 2.0.0 and below 2.3.5 is affected.
• Version 2.4.0 and below 2.12.4 is affected.
• Version 2.13.0 and below 2.13.3 is affected.
• Version 2.14.0 and below 2.14.2 is affected.
• Version 2.15.0 and below 2.15.2 is affected.
• Version 2.16.0 and below 2.16.1 is affected.
• Version 3.0.0 and below 3.8.4 is affected.
• Version 3.9.0 and below 3.9.4 is affected.
• Version 3.10.0 and below 3.10.3 is affected.
• Version 3.11.0 and below 3.11.2 is affected.
• Version 3.12.0 and below 3.12.2 is affected.
• Version 3.13.0 and below 3.13.1 is affected.
• Version 4.0.0 and below 4.5.5 is affected.
• Version 4.6.0 and below 4.6.3 is affected.
• Version 4.7.0 and below 4.7.2 is affected.
• Version 4.8.0 and below 4.8.2 is affected.
• Version 4.9.0 and below 4.9.1 is affected.
• Version 5.0.0 and below 5.1.4 is affected.
• Version 5.2.0 and below 5.2.3 is affected.
• Version 5.3.0 and below 5.3.2 is affected.
• Version 5.4.0 and below 5.4.2 is affected.
• Version 5.5.0 is affected.
• Version 6.0.0 and below 6.0.2 is affected.