CVE-2026-73515 | PostGIS 2.3.3 FlatGeobuf property metadata decoder out-of-bounds

A vulnerability was found in PostGIS 2.3.3 and classified as critical. Affected is an unknown function of the component FlatGeobuf property metadata decoder. The manipulation results in out-of-bounds read.

This vulnerability is reported as CVE-2026-73515. The attack can be launched remotely. Moreover, an exploit is present.

It is suggested to upgrade the affected component.