Sqlite vulnerabilities

Products

• Sqlite 76
• Sqlite3 3

Newest

• sqlite SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause CVE-2026-119591 6.8 MediumOctober 30, 2026
• sqlite SQLite CLI through 3.54.1 Command Injection via .recover Output CVE-2026-119586 8.5 HighOctober 30, 2026
• sqlite SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind() CVE-2026-119379 Fix available 8.5 HighOctober 30, 2026
• sqlite SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite() CVE-2026-119378 6.8 MediumOctober 30, 2026
• sqlite SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING CVE-2026-119377 2.0 LowOctober 30, 2026
• sqlite SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain CVE-2026-119376 6.8 MediumOctober 30, 2026
• sqlite SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch CVE-2026-119375 6.8 MediumOctober 30, 2026
• sqlite SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete() CVE-2026-119374 Fix available 8.5 HighOctober 30, 2026
• sqlite SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists() CVE-2026-119373 Fix available 8.5 HighOctober 30, 2026
• sqlite SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet() CVE-2026-119372 6.8 MediumOctober 30, 2026
• sqlite SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander() CVE-2026-119371 6.8 MediumOctober 30, 2026
• sqlite, siemens ruggedcom crossbow station access controller (sac) +1 more SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate CVE-2026-11824 Fix available 8.5 HighJune 9, 2026
• sqlite, siemens ruggedcom crossbow station access controller (sac) +1 more SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek CVE-2026-11822 Fix available 6.8 MediumJune 9, 2026
• sqlite sqldiff, siemens ruggedcom crossbow station access controller (sac) +1 more SQLite sqldiff remote code execution via argument injection CVE-2025-71316 9.2 CriticalJune 4, 2026
• sqlite, siemens ruggedcom crossbow station access controller (sac) +1 more An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite... CVE-2025-70873 Fix available 7.5 HighMarch 12, 2026
• sqlite fts5 Out Of Bounds write in FTS5 Extension in SQLite CVE-2025-7709 Fix available 6.9 MediumSeptember 8, 2025
• sqlite SQLite integer overflow in key info allocation may lead to information disclosure. CVE-2025-7458 Fix available 6.9 MediumJuly 29, 2025
• sqlite, apple ipados, iphone os +7 more +9 more Integer Truncation on SQLite CVE-2025-6965 Public exploitFix available EPSS 73.5% 7.2 HighJuly 15, 2025
• sqlite, siemens ruggedcom crossbow station access controller (sac), simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated... CVE-2025-3277 Fix available 6.9 MediumApril 14, 2025
• sqlite, siemens ruggedcom crossbow station access controller (sac), simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more An issue in sqlite v.3.49.0 allows an attacker to cause a denial of service via the... CVE-2025-29088 Fix available 5.6 MediumApril 10, 2025
• sqlite, siemens ruggedcom crossbow station access controller (sac), simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more Sqlite 3.49.0 is susceptible to integer overflow through the concat function. CVE-2025-29087 Fix available 3.2 LowApril 7, 2025
• asg017 sqlite-vec Heap-based Buffer Overflow in sqlite-vec CVE-2024-46488 Fix available 5.5 MediumSeptember 25, 2024
• sqlite, fedoraproject extra packages for enterprise linux, fedora +8 more +10 more Sqlite: use-after-free bug in jsonparseaddnodearray CVE-2024-0232 Fix available 4.7 MediumJanuary 12, 2024
• sqlite, sqlite sqlite3, fedoraproject fedora +3 more +5 more SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow CVE-2023-7104 Fix available 5.5 MediumDecember 25, 2023
• sqlite, siemens ruggedcom crossbow, simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of... CVE-2021-31239 Fix available 7.5 HighMay 9, 2023
• sqlite, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not... CVE-2022-46908 Fix available 7.3 HighDecember 12, 2022
• sqlite, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that... CVE-2020-35527 Fix available 9.8 CriticalSeptember 1, 2022
• sqlite, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +12 more +14 more In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing. CVE-2020-35525 Fix available 7.5 HighSeptember 1, 2022
• sqlite, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more `libsqlite3-sys` via C SQLite improperly validates array index CVE-2022-35737 Public exploitFix available EPSS 23.6% 7.5 HighAugust 3, 2022
• ghost sqlite3 Denial of Service (DoS) CVE-2022-21227 Fix available 7.5 HighApril 28, 2022
• sqlite, netapp ontap select deploy administration utility +1 more A Memory Leak vulnerabilty exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously... CVE-2021-45346 Fix availableDisputed 4.3 MediumFebruary 14, 2022
• sqlite, apple iphone os, macos +6 more +8 more Segmentation fault vulnerability in SQLite sqlite3 3.36.0 via the idxGetTableInfo function, in... CVE-2021-36690 Fix availableDisputed 7.5 HighAugust 24, 2021
• sqlite, oracle communications network charging and control, enterprise manager for oracle database +7 more +9 more A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an... CVE-2021-20227 Fix available 5.5 MediumMarch 23, 2021
• sqlite, apple icloud, ipados +16 more +18 more In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a... CVE-2020-15358 Fix available 5.5 MediumJune 27, 2020
• sqlite, debian linux, fedoraproject fedora +12 more +14 more SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite... CVE-2020-13871 Fix available 7.5 HighJune 6, 2020
• sqlite, apple icloud, ipados +19 more +21 more ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the... CVE-2020-13630 Fix available 7.0 HighMay 27, 2020
• sqlite, apple icloud, ipados +18 more +20 more SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables... CVE-2020-13631 Fix available 5.5 MediumMay 27, 2020
• sqlite, broadcom fabric operating system, canonical ubuntu linux +12 more +14 more ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted... CVE-2020-13632 Fix available 5.5 MediumMay 27, 2020
• sqlite, apple icloud, ipados +15 more +17 more SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. CVE-2020-13434 Fix available 5.5 MediumMay 24, 2020
• sqlite, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. CVE-2020-13435 Fix available 5.5 MediumMay 24, 2020
• sqlite, canonical ubuntu linux, debian linux +18 more +20 more SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a... CVE-2020-11655 Fix available 7.5 HighApril 9, 2020
• sqlite, netapp ontap select deploy administration utility, oracle communications messaging server +12 more +14 more In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by... CVE-2020-11656 Fix available 9.8 CriticalApril 9, 2020
• sqlite, canonical ubuntu linux, netapp cloud backup +11 more +13 more In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference... CVE-2020-9327 Fix available 7.5 HighFebruary 21, 2020
• sqlite, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations... CVE-2019-19959 Fix available 7.5 HighJanuary 3, 2020
• sqlite, canonical ubuntu linux, debian linux +4 more +6 more selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a... CVE-2019-20218 Fix available 7.5 HighJanuary 2, 2020
• sqlite, debian linux, netapp cloud backup +11 more +13 more zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update... CVE-2019-19925 Fix available 7.5 HighDecember 24, 2019
• sqlite, apache bookkeeper, netapp cloud backup +5 more +7 more SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window... CVE-2019-19924 Fix available EPSS 10.7% 5.3 MediumDecember 24, 2019
• sqlite, debian linux, netapp cloud backup +11 more +13 more flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving... CVE-2019-19923 Fix available 7.5 HighDecember 24, 2019
• sqlite, debian linux, netapp cloud backup +11 more +13 more multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as... CVE-2019-19926 Fix available 7.5 HighDecember 23, 2019
• sqlite, debian linux, netapp cloud backup +11 more +13 more exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer... CVE-2019-19880 Fix available 7.5 HighDecember 18, 2019
• Show olderLoading…