Bulletin ID: 2026-166-AWS
Publication Date: 11/06/2026 10:00 AM PST
Description:
We identified two issues in the Babelfish TDS protocol layer:
– CVE-2026-119923: A memory-safety issue in the TDS connection-handshake handling could allow a remote, unauthenticated actor to affect the database process.
– CVE-2026-119924: A memory-safety issue in the TDS remote-procedure-call request handling could allow a remote, authenticated actor to read adjacent process memory or cause a denial of service.
Refer to the article below for the most up-to-date and complete information.
This article has been indexed from Latest Bulletins
Read the original article:
CVE-2026-119923 and CVE-2026-119924: Issues with Babelfish for Aurora PostgreSQL