CVE-2026-73515
PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.
| CWE | CWE-125 |
| Vendor | postgis |
| Product | postgis |
| Published | Aug 13, 2026 |
| Last Updated | Aug 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for postgis postgis
Be the first to know when new high vulnerabilities affecting postgis postgis are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High
Affected Versions
PostGIS / PostGIS
0 < 3.7.0beta2
References
mehmetince.net: https://mehmetince.net/part-1-6-systemic-risks-in-the-managed-postgresql-industry-extension-risks-are-real-exploiting-postgis-memory-corruption-bug-at-neondb-supabase-and-many-more/ gitea.osgeo.org: https://gitea.osgeo.org/postgis/postgis/raw/tag/3.7.0beta2/NEWS vulncheck.com: https://www.vulncheck.com/advisories/postgis-0beta2-out-of-bounds-read-via-flatgeobuf-buffer
Credits
Mehmet Ince (@mdisec)