redhat/sqlite-main vulnerabilities

Latest redhat/sqlite-main CVEs

Newest publication first

1. CVE-2026-119591 SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause

   Published 2026-10-30

   Medium·CVSS 6.8 EPSS 0.17%

   SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested...

2. CVE-2026-119378 SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()

   Published 2026-10-30

   Medium·CVSS 6.8 EPSS 0.25%

   SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %_node shadow table. Attackers can supply a database declaring %_node WITHOUT ROWID or with a RAISE(IGNORE) tr...

3. CVE-2026-119373 SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()

   Published 2026-10-30

   High·CVSS 8.5 EPSS 0.16%

   SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can writ...

4. CVE-2026-39113 sqlite: SQLite: Denial of Service via buffer overflow in sqlar extension uncompression

   Published 2026-08-25

   Medium·CVSS 4.0 EPSS 0.19%

   Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an atta...

5. CVE-2026-50812 sqlite: SQLite: Denial of Service via malformed changeset in Session Extension

   Published 2026-07-08

   Medium·CVSS 5.5 EPSS 0.16%

   A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can supply a malformed changeset blob to cause a denial of service. The issue occurs when sqlite3changeset_apply_v3() applie...

6. CVE-2026-50813 sqlite: SQLite: Information disclosure via Session Extension changeset merge path

   Published 2026-07-08

   Medium·CVSS 6.1 EPSS 0.16%

   An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path

7. CVE-2026-11824 SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate

   Published 2026-06-09

   High·CVSS 8.5 EPSS 0.18%

   SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value sma...

8. CVE-2026-11822 SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek

   Published 2026-06-09

   Medium·CVSS 6.8 EPSS 0.19%

   SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page. Attackers can set an oversized term length in the leaf page so that...

9. CVE-2025-70873 An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

   Published 2026-03-12

   High·CVSS 7.5 EPSS 0.50%

   An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.