CVE-2026-6637 PostgreSQL refint模块缓冲区溢出漏洞

-- PoC Concept for CVE-2026-6637 -- Scenario 1: SQL Injection via refint cascade primary key update -- The application updates a primary key column managed by the refint module based on user input. -- Malicious payload (SQL Injection) -- Value: '1; DROP TABLE sensitive_data; --' -- Vulnerable Query (Simulated) -- UPDATE users SET user_id = '1; DROP TABLE sensitive_data; --' WHERE user_id = 1; -- Scenario 2: Stack Buffer Overflow -- Sending a specially crafted long string to trigger the overflow in the refint module. -- Payload construction requires a specific length to overwrite the return address. -- Example (Conceptual): -- 'A' * 1000 + [Return Address]