Approved changes feed: RSS · Atom

cpe:2.3:a:postgis:address_standardizer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPostgis (b076cb3b-0947-560a-9939-ea1a079e9b1a)
ProductAddress Standardizer (0f635597-45d4-5bf0-9301-81807afa0c80)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-90775 vulnerable 2026-09-16 04:33:05.581595 PostGIS address_standardizer through 3.7.0 Out-of-Bounds Read via Unvalidated Rule Weight
MEDIUM (6.5)
PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers can craft malicious rule rows with out-of-range Weight values to trigger out-of-bounds reads in the load_value array, causing the PostgreSQL backend process to crash and terminate all cluster sessions.
Published: 2026-09-13T11:07:30.689Z
Updated: 2026-09-18T17:23:06.091Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.