CyberRota Analysis
AI-GeneratedThe vulnerability affects PostGIS address_standardizer versions up to 3.7.0, where improper validation of the Weight parameter allows attackers to exploit out-of-range values, leading to out-of-bounds reads. This can result in crashes of the PostgreSQL backend process, disrupting all active cluster sessions. Database administrators and organizations using affected versions should prioritize patching to mitigate potential service interruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers can craft malicious rule rows with out-of-range Weight values to trigger out-of-bounds reads in the load_value array, causing the PostgreSQL backend process to crash and terminate all cluster sessions.