REDHAT-BUG-2515434: High severity PostGIS PostGIS vulnerability

Q: Which deployments are exposed?

PostGIS versions before 3.7.0beta2 are affected. The provided information does not identify any configuration prerequisite or deployment-specific limitation.

Q: What does an attacker need to trigger the issue?

An attacker needs to supply a malformed FlatGeobuf buffer with property metadata containing a string length whose body extends beyond the supplied buffer. Processing that buffer can expose memory contents or crash the server.

Q: How can I determine whether my installation is affected?

Check the installed PostGIS version. Versions earlier than 3.7.0beta2 fall within the affected range described here.

Published Aug 13, 2026

Updated

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Affected Software

1 affected component

PostGIS PostGIS<3.7.0beta2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade PostGIS to a version that resolves this vulnerability.
Fixed in 3.7.0beta2

Event History

Aug 13, 2026

Data Sourced

via Red Hat·04:26 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are exposed?

PostGIS versions before 3.7.0beta2 are affected. The provided information does not identify any configuration prerequisite or deployment-specific limitation.

What does an attacker need to trigger the issue?

An attacker needs to supply a malformed FlatGeobuf buffer with property metadata containing a string length whose body extends beyond the supplied buffer. Processing that buffer can expose memory contents or crash the server.

How can I determine whether my installation is affected?

Check the installed PostGIS version. Versions earlier than 3.7.0beta2 fall within the affected range described here.

REDHAT-BUG-2515434: High severity PostGIS PostGIS vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to trigger the issue?

How can I determine whether my installation is affected?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to trigger the issue?

How can I determine whether my installation is affected?