CVE-2026-119374

概要

参考情報

• abraxaslabs.tech/research/sqlite-fts5-securedel · Exploit
• sqlite/sqlite · Product
• sqlite/sqlite · Patch
• sqlite/sqlite commit d9de6ee · Patch
• sqlite.org/releaselog/3_54_0.html · Release Notes
• sqlite.org/src/info/9cd4f9e920 · Patch
• vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete · Third Party Advisory

sqlite のその他の脆弱性

• CVE-2026-119591中 5.5SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process …
• CVE-2026-119586高 7.8SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-…
• CVE-2026-119379高 7.8SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows …
• CVE-2026-119378中 5.5SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed he…
• CVE-2026-119377低 3.3SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined ta…