pgPointcloud through version 1.2.5 contains a heap out-of-bounds read vulnerability in the dimensional patch WKB deserialization code. The flaw allows an authenticated database user to submit pcpatch values with attacker‑controlled size fields, resulting in reading of adjacent heap memory or causing a crash of the PostgreSQL backend. The exposure permits the attacker to exfiltrate information stored in heap memory or to disrupt database availability.

The vulnerability affects installations of the pgpointcloud:pointcloud extension at version 1.2.5 or earlier on PostgreSQL databases. Any user with database privileges that can write pcpatch data is eligible to exploit the flaw.

The CVSS v3.1 score is 7.2, indicating a moderate to high severity. No EPSS data is publicly available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires an authenticated database role, suggesting that attackers must compromise or have legitimate access to the database. Because the flaw permits arbitrary memory reads, sensitive data leakage is possible, and the crash capability provides a denial‑of‑service path. Overall, the risk remains significant for affected deployments.