Out-of-Bounds Write in PostGIS Address Standardizer

Executive Summary

CVE-2026-73514 is an out-of-bounds write vulnerability in the PostGIS address_standardizer extension. It occurs when a database user supplies a rules table with a classification Type value exceeding the fixed class range. The oversized value is used as an index without bounds checking, causing memory corruption by writing outside allocated memory in an internal output-link table.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking the PostGIS address_standardizer extension version. Use SQL commands like SELECT * FROM pg_extension WHERE extname = 'address_standardizer'; to verify the installed version. If the version is prior to commit 423570b, the system is vulnerable.

Useful 0 Not Useful 0

Impact Analysis

An attacker with database access could exploit this to trigger memory corruption, potentially leading to crashes or arbitrary code execution. This could allow privilege escalation to superuser or remote code execution in managed PostgreSQL environments like NeonDB, Supabase, or Xata.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling privilege escalation to superuser and remote code execution in production environments through memory corruption in the PostGIS address_standardizer extension. Unauthorized access or data breaches resulting from such exploits may violate data protection requirements under these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the PostGIS address_standardizer extension to the patched version (commit 423570b or later). Restrict database user permissions to prevent unauthorized rule table modifications. Review and audit all rules tables for invalid Type values exceeding the safe range.

Useful 0 Not Useful 0