Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-102639 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

MobilityDB version 1.3.0 and earlier contains an out-of-bounds read vulnerability in the MEOS binary and library WKB deserialization logic that allows unprivileged database users to crash the PostgreSQL backend process by supplying a crafted WKB payload with a negative length field. The negative length value wraps to a large unsigned size_t due to missing signed validation, bypasses an overflow-unsafe pointer arithmetic bounds check in wkb_parse_state_check(), and causes memcpy() in text_from_wkb_state() to operate with a corrupted unbounded length, resulting in a remote denial-of-service condition affecting all sessions on the PostgreSQL instance.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:5.7 MEDIUMVector:CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CNA: [email protected]CVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/MobilityDB/MobilityDB/releases/tag/v1.2.2	[email protected]	Release NotesVendor
https://github.com/MobilityDB/MobilityDB/releases/tag/v1.3.1	[email protected]	Release NotesVendor
https://github.com/MobilityDB/MobilityDB/security/advisories/GHSA-2c92-2w7c-pm3g	[email protected]	AdvisoryRemedyVendor
https://www.vulncheck.com/advisories/mobilitydb-through-out-of-bounds-read-dos-via-wkb-deserialization	[email protected]	AdvisoryRemedy

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-195	Signed to Unsigned Conversion Error	[email protected]

Affected Products

Product	Versions
MobilityDB	>= 1.3.0, < 1.3.1 (semver) >= 1.2.0, < 1.2.2 (semver) >= 1.1.0, <= 1.1.2 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 1.3.1moderate effort Compile and install MobilityDB 1.3.1, then run in each database: ALTER EXTENSION mobilitydb UPDATE TO '1.3.1'; Upgrade: 1.2.2moderate effort Compile and install MobilityDB 1.2.2, then run in each database: ALTER EXTENSION mobilitydb UPDATE TO '1.2.2'; Mitigation:low effort Revoke EXECUTE on the functions that read Well-Known Binary from the roles that do not need them. The binary receive functions belong to the types and cannot be revoked separately, so upgrading is the fix.

Product

Versions

MobilityDB

>= 1.3.0, < 1.3.1 (semver)

>= 1.2.0, < 1.2.2 (semver)

>= 1.1.0, <= 1.1.2 (semver)

CPE

No CPEs found in CPE dictionary for this product.

Remediation

Upgrade: 1.3.1moderate effort
Compile and install MobilityDB 1.3.1, then run in each database: ALTER EXTENSION mobilitydb UPDATE TO '1.3.1';
Upgrade: 1.2.2moderate effort
Compile and install MobilityDB 1.2.2, then run in each database: ALTER EXTENSION mobilitydb UPDATE TO '1.2.2';
Mitigation:low effort
Revoke EXECUTE on the functions that read Well-Known Binary from the roles that do not need them. The binary receive functions belong to the types and cannot be revoked separately, so upgrading is the fix.

Change History

1 change record found show changes