pgPointcloud through 1.2.5 heap out-of-bounds read via WKB deserialization

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-100387 · Microsoft / collected KEV context

cve-program · CVE-2026-100387

• https://github.com/pgpointcloud/pointcloud/issues/387
• https://github.com/pgpointcloud/pointcloud/pull/388
• https://github.com/pgpointcloud/pointcloud/blob/v1.2.5/lib/pc_bytes.c#L1347-L1373
• https://github.com/pgpointcloud/pointcloud
• https://www.vulncheck.com/advisories/pgpointcloud-through-1.2.5-heap-out-of-bounds-read-via-wkb-deserialization

No related operational record is retained in the current change model.