Description
pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy heap memory into stored patches for exfiltration or crash the PostgreSQL backend.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
pgpointcloud pointcloud
Default version status: unaffected
0 to ≤ 1.2.5affected
References
- https://github.com/pgpointcloud/pointcloud/issues/387 ↗
- https://github.com/pgpointcloud/pointcloud/pull/388 ↗
- https://github.com/pgpointcloud/pointcloud/blob/v1.2.5/lib/pc_bytes.c#L1347-L1373 ↗
- https://github.com/pgpointcloud/pointcloud ↗
- https://www.vulncheck.com/advisories/pgpointcloud-through-1.2.5-heap-out-of-bounds-read-via-wkb-deserialization ↗