Bug 2553090 (CVE-2026-102463) - CVE-2026-102463 io.vertx/vertx-pg-client: vertx-pg-client: Denial of Service via unbounded array allocation
Summary: CVE-2026-102463 io.vertx/vertx-pg-client: vertx-pg-client: Denial of Service ...
Keywords:
Status: NEW
Alias: CVE-2026-102463
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-10-15 08:31 UTC by OSIDB Bzimport
Modified: 2026-11-03 14:17 UTC (History)
12 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-10-15 08:31:40 UTC 
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client (DataTypeCodec.binaryDecodeArray) allocates a Java array sized by a server-declared 32-bit dimension count with no upper bound. A malicious or compromised PostgreSQL server, or an on-path attacker intercepting an unencrypted connection, can send a crafted DataRow message with an excessively large array dimension value, causing the client to attempt a multi-gigabyte heap allocation and crash with an OutOfMemoryError.



The impacted component is io.vertx:vertx-pg-client.
Note You need to log in before you can comment on or make changes to this bug.