7 matches found
CVE-2026-73514
The addressstandardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardizeaddress to trigger memory corruption by providing a rules table...
CVE-2026-73514 PostGIS address_standardizer Out-of-Bounds Write via standardize_address()
The addressstandardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardizeaddress to trigger memory corruption by providing a rules table...
CVE-2026-73514
The CVE concerns the address_standardizer extension for PostGIS up to version 3.7.0. A memory corruption vulnerability arises when a database user can supply caller-controlled relation names to standardize_address(), allowing an out-of-bounds write by using a rules table entry with a classificati...
CVE-2026-73514 PostGIS address_standardizer Out-of-Bounds Write via standardize_address()
The addressstandardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardizeaddress to trigger memory corruption by providing a rules table...
CVE-2026-73514 PostGIS address_standardizer Out-of-Bounds Write via standardize_address()
The addressstandardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardizeaddress to trigger memory corruption by providing a rules table...
PT-2026-71687
Name of the Vulnerable Software and Affected Versions PostGIS address standardizer versions prior to 3.7.0 Description The address standardizer extension contains an out-of-bounds write issue. A database user capable of providing caller-controlled relation names to the standardize address functio...
CVE-2026-73514: Out-of-bounds Write
The addressstandardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardizeaddress to trigger memory corruption by providing a rules table...