PT-2026-90844

Name of the Vulnerable Software and Affected Versions PostGIS address standardizer versions prior to 3.7.1 Description The address standardizer component fails to validate the Weight parameter provided in caller-supplied rules tables before utilizing it as an array index. This allows an attacker ...

CVE-2026-73514

The addressstandardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardizeaddress to trigger memory corruption by providing a rules table...

CVE-2026-73514

The addressstandardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardizeaddress to trigger memory corruption by providing a rules table...

CVE-2026-73514 PostGIS address_standardizer Out-of-Bounds Write via standardize_address()

The addressstandardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardizeaddress to trigger memory corruption by providing a rules table...

PT-2026-71687

Name of the Vulnerable Software and Affected Versions PostGIS address standardizer versions prior to 3.7.0 Description The address standardizer extension contains an out-of-bounds write issue. A database user capable of providing caller-controlled relation names to the standardize address functio...

CVE-2026-73514: Out-of-bounds Write

The addressstandardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardizeaddress to trigger memory corruption by providing a rules table...