Description
pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy heap memory into stored patches for exfiltration or crash the PostgreSQL backend.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| pgpointcloud | pointcloud | ≤ 1.2.5 | — |
References
- GitHub Issue #387 issue-tracking
- https://github.com/pgpointcloud/pointcloud/pull/388 issue-tracking patch
- https://github.com/pgpointcloud/pointcloud/blob/v1.2.5/lib/pc_bytes.c#L1347-L1373 technical-description
- https://github.com/pgpointcloud/pointcloud product
- VulnCheck Advisory: pgPointcloud through 1.2.5 heap out-of-bounds read via WKB deserialization third-party-advisory