PostGIS vulnerabilities
We track 2 vulnerabilities in PostGIS products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 13, 2026.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest PostGIS vulnerabilities
- 8.1 High severity
PostGIS: Out-of-bounds Read
PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field i
- 8.8 High severity
address_standardizer: Out-of-bounds Write
The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardize_address() to trigger mem