Skip to content
OpenAdvisories
High WID-SEC-2026-4260 11 CVEs

SQLite: Mehrere Schwachstellen

Published Nov 1, 2026 · Updated Nov 12, 2026 · Revision 4 · de

Vendor: amazon Vendor: Red Hat Vendor: RESF Product: Enterprise Linux Product: Linux 2 Product: Rocky Linux Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in SQLite ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen und um Daten zu manipulieren.

Product

SQLite ist eine in C geschriebene Bibliothek, die eine kleine, schnelle, eigenständige, hochzuverlässige und voll ausgestattete SQL-Datenbank-Engine implementiert.

Vulnerabilities 11

  • High 7.8
    CVE-2026-119373

    SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()

    SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-119374

    SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()

    SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when d…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-119379

    SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()

    SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changes…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-119586

    SQLite CLI through 3.54.1 Command Injection via .recover Output

    SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqlite_schema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE …

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux Wolfi
  • Medium 5.5
    CVE-2026-119371

    SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()

    SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH nesting limit because common table expressions are not counted against it. Attackers can supply a WITH clause chaining tens of thousands…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2026-119372

    SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()

    SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet() caused by dangling cached position-list pointers. Attackers can run a full-text MATCH query combining OR and NEAR operato…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2026-119375

    SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch

    SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache memory by supplying a WAL file with an undersized page size. Attackers can craft a database and WAL file whose oversized record payloa…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux crates.io
  • Medium 5.5
    CVE-2026-119376

    SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain

    SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH limit by chaining COLLATE postfix operators. Attackers can supply roughly 175,000 chained COLLATE operators in SQL or an untrusted datab…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2026-119378

    SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()

    SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %_node shadow table. Attackers can supply a database declaring %_node WITHOUT ROWID or wi…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2026-119591

    SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause

    SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can t…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux
  • Low 2.5
    CVE-2026-119377

    SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING

    SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read column…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux

Revision history

  1. #4

    Neue Updates von Amazon aufgenommen

  2. #3

    Neue Updates von Red Hat aufgenommen

  3. #2

    Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen

  4. #1

    Initiale Fassung

References