High severity8.1NVD Advisory· Published Aug 13, 2026· Updated Sep 24, 2026
CVE-2026-73515
CVE-2026-73515
Description
PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
31- osv-coords30 versionspkg:bitnami/postgispkg:rpm/almalinux/pg_repackpkg:rpm/almalinux/pgauditpkg:rpm/almalinux/pgvectorpkg:rpm/almalinux/postgispkg:rpm/almalinux/postgis-clientpkg:rpm/almalinux/postgis-docspkg:rpm/almalinux/postgis-upgradepkg:rpm/almalinux/postgis-utilspkg:rpm/almalinux/postgres-decoderbufspkg:rpm/almalinux/postgresqlpkg:rpm/almalinux/postgresql-contribpkg:rpm/almalinux/postgresql-docspkg:rpm/almalinux/postgresql-plperlpkg:rpm/almalinux/postgresql-plpython3pkg:rpm/almalinux/postgresql-pltclpkg:rpm/almalinux/postgresql-private-develpkg:rpm/almalinux/postgresql-private-libspkg:rpm/almalinux/postgresql-serverpkg:rpm/almalinux/postgresql-server-develpkg:rpm/almalinux/postgresql-staticpkg:rpm/almalinux/postgresql-testpkg:rpm/almalinux/postgresql-test-rpm-macrospkg:rpm/almalinux/postgresql-upgradepkg:rpm/almalinux/postgresql-upgrade-develpkg:rpm/almalinux/postgresql18-postgispkg:rpm/almalinux/postgresql18-postgis-clientpkg:rpm/almalinux/postgresql18-postgis-docspkg:rpm/almalinux/postgresql18-postgis-upgradepkg:rpm/almalinux/postgresql18-postgis-utils
< 3.7.0+ 29 more
- (no CPE)range: < 3.7.0
- (no CPE)range: < 1.5.1-1.module_el9.6.0+146+c54fdeca
- (no CPE)range: < 16.0-1.module_el9.4.0+66+eb9878bc
- (no CPE)range: < 0.6.2-2.module_el9.6.0+167+4e561146
- (no CPE)range: < 3.5.3-4.el10_2.1
- (no CPE)range: < 3.5.3-4.el10_2.1
- (no CPE)range: < 3.5.3-4.el10_2.1
- (no CPE)range: < 3.5.3-4.el10_2.1
- (no CPE)range: < 3.5.3-4.el10_2.1
- (no CPE)range: < 2.4.0-1.Final.module_el9.4.0+66+eb9878bc
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 3.5.3-1.el10_2.1
- (no CPE)range: < 3.5.3-1.el10_2.1
- (no CPE)range: < 3.5.3-1.el10_2.1
- (no CPE)range: < 3.5.3-1.el10_2.1
- (no CPE)range: < 3.5.3-1.el10_2.1
Patches
Vulnerability mechanics
References
3- gitea.osgeo.org/postgis/postgis/raw/tag/3.7.0beta2/NEWSnvd
- mehmetince.net/part-1-6-systemic-risks-in-the-managed-postgresql-industry-extension-risks-are-real-exploiting-postgis-memory-corruption-bug-at-neondb-supabase-and-many-more/nvd
- www.vulncheck.com/advisories/postgis-0beta2-out-of-bounds-read-via-flatgeobuf-buffernvd
News mentions
0No linked articles in our index yet.