HIGH 7.1 NVD
CVE-2026-90775
PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers
PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers can craft malicious rule rows with out-of-range Weight values to trigger out-of-bounds reads in the load_value array, causing the PostgreSQL backend process to crash and terminate all cluster sessions.
References
- https://github.com/postgis/address_standardizer
- https://github.com/postgis/address_standardizer/blob/e987949e0fccff6a0e7a6d3f86814d5c7a01f
- https://github.com/postgis/address_standardizer/blob/v3.7.0/src/analyze.c#L860
- https://github.com/postgis/address_standardizer/blob/v3.7.0/src/gamma.c#L301-L311
- https://github.com/postgis/address_standardizer/commit/a5cb4b1360a040973092f13b1af97a718e7
This high severity vulnerability with a CVSS score of 7.1 was published on 2026-09-13 via NVD.
vulnfeed aggregates 13632 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.