Vulnerability · Published Aug 13, 2026 · Assigned by VulnCheck

CVE-2026-73514PostGIS address_standardizer Out-of-Bounds Write via standardize_address()

High 8.8

In plain English

A high-severity out-of-bounds write in address_standardizer from PostGIS. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.8%top 42.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardize_address() to trigger memory corruption by providing a rules table with a classification Type value exceeding the fixed class range. Attackers can craft a malicious rules table entry with an oversized rule type value that is used without bounds checking as an index into an internal output-link table, resulting in an out-of-bounds write.

Affected products (as reported)

Vendor	Product	Versions
PostGIS	address_standardizer	0 – before 423570b0dbf6cd9f6fc36de28a636e7b6e9aa8aa

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Researcher Blog technical-description, exploit
Pull Request (1) issue-tracking
Pull Request (2) issue-tracking, patch
Patch Commit patch
https://www.vulncheck.com/advisories/postgis-address-standardizer-out-of-bounds-write-via-standardize-address third-party-advisory