Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-73515 Out-of-Bounds Read in PostGIS Before 3.7.0beta2 Leads to Memory Disclosure or Crash https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-73515
Post summary
A newly disclosed Out-of-Bounds Read vulnerability (CVE-2026-73515) in PostGIS prior to version 3.7.0beta2 could lead to memory disclosure or crash; no PoC, exploit, patch, or active exploitation is reported.
If using PostGIS, ensure you update to version 3.5.3-6. This mitigates the critical security vulnerability CVE-2026-73515 in PostgreSQL deployments. #Security #PostgreSQL #PostGIS #CVE
Check your PostGIS version. Oracle advisory updated `postgis` to `3.5.3-6` fixing CVE-2026-73515. Review this if you use Postgres on Linux 9 systems. #PostgreSQL #Linux #PostGIS #CVE