CVE-2026-45678 | BDVDB-2026-337349 Detail

Description#

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assumes BIND message payloads contain a valid NUL-terminated portal name. A crafted empty or unterminated payload can make OBI slice beyond the end of the captured buffer and panic. This issue has been patched in version 0.9.0.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-06-02Record published in the CVE List.