CVE-2026-90775

Name of the Vulnerable Software and Affected Versions PostGIS address standardizer versions prior to 3.7.1

Description The address standardizer component fails to validate the Weight parameter provided in caller-supplied rules tables before utilizing it as an array index. This allows an attacker to create malicious rule rows containing out-of-range Weight values, triggering out-of-bounds reads within the load value array. This action results in the crash of the PostgreSQL backend process and the termination of all active cluster sessions.

Recommendations Update to a version newer than 3.7.0.