{"id":"CVE-2026-39113","aliases":["BELL-CVE-2026-39113","DEBIAN-CVE-2026-39113","EUVD-2026-66176","GHSA-g4fp-96fc-xc72","RHSA-2026:49665","UBUNTU-CVE-2026-39113","USN-8775-1"],"status":"published","title":"Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing...","description":"Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an attacker to cause a denial of service via the ext/misc/sqlar.c, sqlarUncompressFunc(), sqlar_uncompress(), sqlite3_value_int64(), sqlite3_malloc(int), uncompress() components","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00191,"percentile":0.08857,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-122"],"published":"2026-08-25T00:00:00Z","modified":"2026-10-28T11:12:19Z","exploits":[{"source":"pocgithub","id":"20000419/CVE-2026-39113","title":"20000419/CVE-2026-39113","date":"2026-08-21","url":"https://github.com/20000419/CVE-2026-39113"}],"fixes":[{"ecosystem":"Debian:14","package":"sqlite3","fixed_in":["3.53.2-1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"lemon","fixed_in":["0:3.53.4-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"sqlite","fixed_in":["0:3.53.4-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"sqlite-analyzer","fixed_in":["0:3.53.4-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"sqlite-debug","fixed_in":["0:3.53.4-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"sqlite-devel","fixed_in":["0:3.53.4-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"sqlite-doc","fixed_in":["0:3.53.4-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"sqlite-libs","fixed_in":["0:3.53.4-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"sqlite-tcl","fixed_in":["0:3.53.4-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"sqlite-tools","fixed_in":["0:3.53.4-1.hum1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sqlite3","fixed_in":["3.22.0-1ubuntu0.7+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"sqlite3","fixed_in":["3.31.1-4ubuntu0.7+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"sqlite3","fixed_in":["3.37.2-2ubuntu0.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"sqlite3","fixed_in":["3.45.1-1ubuntu2.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"sqlite3","fixed_in":["3.46.1-9ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:13","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.46.1-7","3.46.1-7+deb13u1","3.46.1-7+deb13u2","3.46.1-8","3.46.1-9","3.53.2-1","3.53.3-1","3.53.4-1","3.53.4-2"]},{"source":"osv","ecosystem":"Debian:14","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.53.2-1"}]}],"versions":["3.46.1-7","3.46.1-8","3.46.1-9"]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"lemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.53.4-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.53.4-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"sqlite-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.53.4-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"sqlite-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.53.4-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"sqlite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.53.4-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"sqlite-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.53.4-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"sqlite-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.53.4-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"sqlite-tcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.53.4-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"sqlite-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.53.4-1.hum1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.17-8fakesync1","2.8.17-9fakesync1","2.8.17-10ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.17-12fakesync1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.0-1ubuntu0.7+esm3"}]}],"versions":["3.19.3-3","3.20.1-2","3.21.0-1","3.22.0-1","3.22.0-1ubuntu0.1","3.22.0-1ubuntu0.2","3.22.0-1ubuntu0.3","3.22.0-1ubuntu0.4","3.22.0-1ubuntu0.5","3.22.0-1ubuntu0.6","3.22.0-1ubuntu0.7","3.22.0-1ubuntu0.7+esm1","3.22.0-1ubuntu0.7+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.17-14fakesync1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.31.1-4ubuntu0.7+esm2"}]}],"versions":["3.29.0-2","3.30.1-1","3.30.1-1ubuntu1","3.31.1-1ubuntu1","3.31.1-3","3.31.1-4","3.31.1-4ubuntu0.1","3.31.1-4ubuntu0.2","3.31.1-4ubuntu0.3","3.31.1-4ubuntu0.4","3.31.1-4ubuntu0.5","3.31.1-4ubuntu0.6","3.31.1-4ubuntu0.7","3.31.1-4ubuntu0.7+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.17-15fakesync1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.17-15fakesync1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.37.2-2ubuntu0.8"}]}],"versions":["3.35.5-1","3.36.0-2","3.37.2-2","3.37.2-2ubuntu0.1","3.37.2-2ubuntu0.3","3.37.2-2ubuntu0.4","3.37.2-2ubuntu0.5","3.37.2-2ubuntu0.6","3.37.2-2ubuntu0.7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.45.1-1ubuntu2.8"}]}],"versions":["3.42.0-1","3.44.0-1","3.44.2-1","3.45.0-1","3.45.1-1","3.45.1-1ubuntu1","3.45.1-1ubuntu2","3.45.1-1ubuntu2.1","3.45.1-1ubuntu2.3","3.45.1-1ubuntu2.4","3.45.1-1ubuntu2.5","3.45.1-1ubuntu2.6","3.45.1-1ubuntu2.7"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.46.1-9ubuntu0.3"}]}],"versions":["3.46.1-8","3.46.1-9","3.46.1-9ubuntu0.1","3.46.1-9ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.0-1ubuntu0.7+esm3"}]}],"versions":["3.19.3-3","3.20.1-2","3.21.0-1","3.22.0-1","3.22.0-1ubuntu0.1","3.22.0-1ubuntu0.2","3.22.0-1ubuntu0.3","3.22.0-1ubuntu0.4","3.22.0-1ubuntu0.5","3.22.0-1ubuntu0.6","3.22.0-1ubuntu0.7","3.22.0-1ubuntu0.7+esm1","3.22.0-1ubuntu0.7+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.31.1-4ubuntu0.7+esm2"}]}],"versions":["3.29.0-2","3.30.1-1","3.30.1-1ubuntu1","3.31.1-1ubuntu1","3.31.1-3","3.31.1-4","3.31.1-4ubuntu0.1","3.31.1-4ubuntu0.2","3.31.1-4ubuntu0.3","3.31.1-4ubuntu0.4","3.31.1-4ubuntu0.5","3.31.1-4ubuntu0.6","3.31.1-4ubuntu0.7","3.31.1-4ubuntu0.7+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.37.2-2ubuntu0.8"}]}],"versions":["3.35.5-1","3.36.0-2","3.37.2-2","3.37.2-2ubuntu0.1","3.37.2-2ubuntu0.3","3.37.2-2ubuntu0.4","3.37.2-2ubuntu0.5","3.37.2-2ubuntu0.6","3.37.2-2ubuntu0.7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.45.1-1ubuntu2.8"}]}],"versions":["3.42.0-1","3.44.0-1","3.44.2-1","3.45.0-1","3.45.1-1","3.45.1-1ubuntu1","3.45.1-1ubuntu2","3.45.1-1ubuntu2.1","3.45.1-1ubuntu2.3","3.45.1-1ubuntu2.4","3.45.1-1ubuntu2.5","3.45.1-1ubuntu2.6","3.45.1-1ubuntu2.7"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.46.1-9ubuntu0.3"}]}],"versions":["3.46.1-8","3.46.1-9","3.46.1-9ubuntu0.1","3.46.1-9ubuntu0.2"]}],"references":[{"url":"https://www.sqlite.org/","tags":["web","article"]},{"url":"https://github.com/sqlite/sqlite/commit/169f68ed88b34cb68f720191c64c058f2ccec508","tags":["fix","article","report"]},{"url":"https://github.com/sqlite/sqlite/blob/169f68ed88b34cb68f720191c64c058f2ccec508/ext/misc/sqlar.c","tags":["web","article"]},{"url":"https://www.sqlite.org/sqlar.html","tags":["web","article"]},{"url":"https://github.com/20000419/CVE-2026-39113","tags":["package","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39113","tags":["advisory"]},{"url":"https://www.sqlite.org"},{"url":"https://github.com/advisories/GHSA-g4fp-96fc-xc72"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-39113","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39113.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-39113","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:49665","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-39113","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49665.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2524129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-39113","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2026-39113","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8775-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-39113","description":"Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an attacker to cause a denial of service via the ext/misc/sqlar.c, sqlarUncompressFunc(), sqlar_uncompress(), sqlite3_value_int64(), sqlite3_malloc(int), uncompress() components","status":"published","published":"2026-08-25T00:00:00Z","modified":"2026-08-31T15:11:27.506Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:20:02.662847Z"}],"euvd":[{"id":"EUVD-2026-66176","description":"Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an attacker to cause a denial of service via the ext/misc/sqlar.c, sqlarUncompressFunc(), sqlar_uncompress(), sqlite3_value_int64(), sqlite3_malloc(int), uncompress() components","status":"published","published":"2026-08-25T00:00:00Z","modified":"2026-08-31T15:11:27Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T18:01:21.100116Z"}],"ghsa":[{"id":"GHSA-g4fp-96fc-xc72","title":"Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing...","description":"Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an attacker to cause a denial of service via the ext/misc/sqlar.c, sqlarUncompressFunc(), sqlar_uncompress(), sqlite3_value_int64(), sqlite3_malloc(int), uncompress() components","status":"published","published":"2026-08-25T21:31:30Z","modified":"2026-08-31T18:31:16Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:11:11.297642Z"}],"nvd":[{"id":"CVE-2026-39113","description":"Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an attacker to cause a denial of service via the ext/misc/sqlar.c, sqlarUncompressFunc(), sqlar_uncompress(), sqlite3_value_int64(), sqlite3_malloc(int), uncompress() components","status":"published","published":"2026-08-25T21:17:00.08Z","modified":"2026-09-09T16:04:24.933Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:12:41.347728Z"}],"osv":[{"id":"BELL-CVE-2026-39113","title":"CVE-2026-39113 does not affect BellSoft software","status":"withdrawn","published":"2026-09-03T06:05:22.704757Z","modified":"2026-09-04T07:15:15.425690769Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:23.572955Z"},{"id":"CVE-2026-39113","description":"Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an attacker to cause a denial of service via the ext/misc/sqlar.c, sqlarUncompressFunc(), sqlar_uncompress(), sqlite3_value_int64(), sqlite3_malloc(int), uncompress() components","status":"published","published":"2026-08-25T00:00:00Z","modified":"2026-10-28T11:12:19.743375692Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:03.040464Z"},{"id":"DEBIAN-CVE-2026-39113","description":"Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an attacker to cause a denial of service via the ext/misc/sqlar.c, sqlarUncompressFunc(), sqlar_uncompress(), sqlite3_value_int64(), sqlite3_malloc(int), uncompress() components","status":"published","published":"2026-08-25T21:17:00.08Z","modified":"2026-09-14T14:00:07.383301829Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:54.892385Z"},{"id":"RHSA-2026:49665","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-10-17T10:15:01Z","modified":"2026-10-17T10:31:37.913145918Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"UBUNTU-CVE-2026-39113","description":"Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an attacker to cause a denial of service via the ext/misc/sqlar.c, sqlarUncompressFunc(), sqlar_uncompress(), sqlite3_value_int64(), sqlite3_malloc(int), uncompress() components","status":"published","published":"2026-08-25T21:17:00Z","modified":"2026-09-17T13:30:06.584696439Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:56:16.686388Z"},{"id":"USN-8775-1","title":"sqlite3 vulnerability","description":"It was discovered that SQLite was vulnerable to a buffer overflow in\nthe sqlar extension. If a user were tricked into opening a specially\ncrafted SQLar archive, an attacker could cause a denial of service.","status":"published","published":"2026-09-16T16:49:40Z","modified":"2026-09-17T19:57:25.513953597Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}