Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 12 MIN AGO
T-12M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-73514
PostGIS address_standardizer Out-of-Bounds Write via standardize_address()
High
PUBLISHED
CNA: VulnCheck
Base score
8.7
CVSS v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
View raw JSON
CVE Program record
02
Description
CNA: VulnCheck
PostGIS address_standardizer Out-of-Bounds Write via standardize_address()
03
Metadata
SCHEMA: 5.2
Published
2026-08-13 15:36Z
1 DAY AGO
Last updated
2026-08-14 12:46Z
5 HR AGO
Reserved
2026-08-12
Assigning CNA
VulnCheck
Record state
PUBLISHED
Severity
High (CVSS 8.7)
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weaknesses
CWE-787
SSVC decision
Exploitation
poc
Automatable
no
Technical Impact
total
Data version
5.2
Document digest
742b9ace3875708450e253b5c7def1d65510bd27e015e3af1a0ec3cc95e39028
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
PostGIS
address_standardizer
0 to < 423570b0dbf6cd9f6fc36de28a636e7b6e9aa8aa
—
05
References
REFS: 5
mehmetince.net
Researcher Blog
https://mehmetince.net/part-1-6-systemic-risks-in-the-managed-postgresql-industry-extension-risks-are-real-exploiting-postgis-memory-corruption-bug-at-neondb-supabase-and-many-more/
technical-description
exploit
github.com
Pull Request (1)
https://github.com/postgis/address_standardizer/pull/3
issue-tracking
github.com
Pull Request (2)
https://github.com/postgis/address_standardizer/pull/4
issue-tracking
patch
github.com
Patch Commit
https://github.com/postgis/address_standardizer/commit/423570b0dbf6cd9f6fc36de28a636e7b6e9aa8aa
patch
www.vulncheck.com
https://www.vulncheck.com/advisories/postgis-address-standardizer-out-of-bounds-write-via-standardize-address
third-party-advisory