CVE-2026-119924 | AWS/Amazon Babelfish for PostgreSQL TDS RPC procedure-name parser out-of-bounds

November 6, 2026 Yanac

A vulnerability described as critical has been identified in AWS/Amazon Babelfish for PostgreSQL and Aurora PostgreSQL with Babelfish. Affected by this vulnerability is an unknown functionality of the component TDS RPC procedure-name parser. Such manipulation leads to out-of-bounds read.

This vulnerability is referenced as CVE-2026-119924. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More