pgpointcloud vulnerabilities

Products

• pointcloud 1

Latest pgpointcloud CVEs

Newest publication first

1. CVE-2026-100387 pgPointcloud through 1.2.5 heap out-of-bounds read via WKB deserialization

   Published 2026-09-25

   High·CVSS 7.2

   pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy hea...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.