Skip to content
OpenAdvisories

Package · Debian

address-standardizer

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    PostGIS address_standardizer through 3.7.0 Out-of-Bounds Read via Unvalidated Rule Weight

    PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers can craft malicious rule rows with out-of-range Weight values to trigger out-of-bounds reads in th…