Threats affecting pkg:github/MobilityDB

MobilityDB versions up to 1.3.0 contain a vulnerability in the WKB deserialization logic where a signed to unsigned conversion error allows unprivileged users to cause a denial-of-service by crashing the PostgreSQL backend. This occurs due to a negative length field in a crafted WKB payload that bypasses bounds checks and leads to out-of-bounds memory reads during memcpy operations.