An out-of-bounds read vulnerability exists in PostGIS versions prior to 3.7.0beta2, affecting numerous specific package versions. The vulnerability allows an attacker with low privileges to cause a denial of service by triggering a crash or resource exhaustion. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity impact, and high availability impact. No known exploits in the wild have been reported, and no vendor advisory or patch links are provided in the data.

The vulnerability can be exploited remotely by an attacker with low privileges to cause a denial of service, impacting system availability and confidentiality. There is no indication of integrity compromise. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates and consider restricting access to vulnerable PostGIS instances until a fix is available.