Vulnerability Bulletins |
CVE-2026-90775 |
|
| Affected software | POSTGRESQL |
| PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers can craft malicious rule rows with out-of-range Weight values to trigger out-of-bounds reads in the load_value array, causing the PostgreSQL backend process to crash and terminate all cluster sessions. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-90775 | |