Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-73514— PostGIS address_standardizer Out-of-Bounds Write via standardize_address()

Quick assessment

Affected
PostGIS address_standardizer
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

PostGIS 的 address_standardizer 扩展（版本 3.7.0 及之前版本，已在提交 423570b 中修复）存在一个越界写入漏洞。该漏洞允许具备向 函数提供用户可控关系名称权限的数据库用户，通过构造一个分类类型（classification Type）值超出固定类别范围的规则表（rules table），触发内存损坏。攻击者可以构造一个恶意规则表条目，其中包含一个过大（超出范围）的规则类型（rule type）值。该值在没有进行边界检查的情况下被用作内部输出链接表（internal outp

CVSS 8.8 · High EPSS 0.82% · P58

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
PostGIS address_standardizer < 423570b0dbf6cd9f6fc36de28a636e7b6e9aa8aa affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-73514

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
PostGIS address_standardizer Out-of-Bounds Write via standardize_address()
Source: CVE Program / CVE List V5
Vulnerability Description
The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardize_address() to trigger memory corruption by providing a rules table with a classification Type value exceeding the fixed class range. Attackers can craft a malicious rules table entry with an oversized rule type value that is used without bounds checking as an index into an internal output-link table, resulting in an out-of-bounds write.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
PostGIS address_standardizer 0 ~ 423570b0dbf6cd9f6fc36de28a636e7b6e9aa8aa -

II. Public POCs for CVE-2026-73514

# POC Description Source Link Shenlong Link
AI-Generated POC Verified env Premium
Reproduced successfully in a real sandbox · Below is the actual recording of building the environment and exploiting the vulnerability.
Success marker: VULNERABLE: no segfault observed in logs after exploit attempt
Reproduction recording is a Pro+ exclusive
Watch the full sandbox build + live exploit recording for this CVE. Limited-time ¥499/mo.
Upgrade to Pro+
Qwen3.6-35B-A3B · 9593 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-73514

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-73514 (2)

Vendor Advisories for CVE-2026-73514 (1)

IV. Related Vulnerabilities

Same product: address_standardizer
Same vendor: PostGIS
Same weakness: CWE-787