Skip to content
OpenAdvisories

Vendor

PostGIS

3 known vulnerabilities.

Products

address_standardizer 2 PostGIS 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-73515

    PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer

    PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field …

    PostGIS PostGIS postgis postgis Debian Ubuntu Wolfi
  • High 8.8
    CVE-2026-73514

    PostGIS address_standardizer Out-of-Bounds Write via standardize_address()

    The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardize_address() to trigger me…

    PostGIS address_standardizer