CVE-2026-90775 — PostGIS address_standardizer through 3.7.0 Out-of-Bounds Read via Unvalidated Rule Weight
PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers can craft malici…
Published: 2026-09-13 · CVSS: 7.1 · CVSS 4.0
PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers can craft malicious rule rows with out-of-range Weight values to trigger out-of-bounds reads in the load_value array, causing the PostgreSQL backend process to crash and terminate all cluster sessions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7