CVE-2026-73514: PostGIS address_standardizer Out-of-Bounds Write via standardize_address()
The addressstandardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardizeaddress() to trigger memory corruption by providing a rules table with a classification Type value exceeding the fixed class range. Attackers can craft a malicious rules table entry with an oversized rule type value that is used without bounds checking as an index into an internal output-link table, resulting in an out-of-bounds write.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PostGIS address_standardizer extensionto a version that resolves this vulnerability.Fixed in 3.7.0Patch 423570b
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73514?
CVE-2026-73514 has a severity rating of 8.8, indicating it is a high-risk vulnerability.
How do I fix CVE-2026-73514?
To fix CVE-2026-73514, upgrade to the latest version of PostGIS address_standardizer, which is patched in version 3.7.1 or later.
What type of vulnerability is CVE-2026-73514?
CVE-2026-73514 is an out-of-bounds write vulnerability impacting the address_standardizer extension for PostGIS.
Who is affected by CVE-2026-73514?
Any database user with the ability to supply caller-controlled relation names to the standardize_address() function is affected by CVE-2026-73514.
What can happen if CVE-2026-73514 is exploited?
Exploitation of CVE-2026-73514 can lead to memory corruption, potentially allowing an attacker to execute arbitrary code.