CVE-2026-119376

概要

参考情報

• abraxaslabs.tech/research/sqlite-collate-depth · Exploit
• sqlite/sqlite · Product
• sqlite/sqlite · Patch
• sqlite/sqlite commit d54522a · Patch
• sqlite.org/bugs/info/2026-10-04T04:50:56Z · Issue Tracking
• sqlite.org/releaselog/3_54_0.html · Release Notes
• sqlite.org/src/info/252c0b7bf5a727d2 · Issue Tracking
• vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-collate-operator-chain · Third Party Advisory

sqlite のその他の脆弱性

• CVE-2026-11824高 7.8SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cau…
• CVE-2026-11822中 5.5SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the …
• CVE-2025-70873高 7.5An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to ob…
• CVE-2025-7458緊急 9.1An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability …
• CVE-2025-6965高 7.7There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns availab…