CVE-2026-119378

概要

参考情報

• abraxaslabs.tech/research/sqlite-rtree-rowid0 · Exploit
• sqlite/sqlite · Product
• sqlite/sqlite · Product
• sqlite/sqlite commit d21bd37 · Patch
• sqlite.org/releaselog/3_54_0.html · Release Notes
• sqlite.org/src/info/6a9e1415659f9e75 · Patch
• vulncheck.com/advisories/sqlite-before-3.54.0-use-after-free-in-r-tree-nodewrite · Third Party Advisory

sqlite のその他の脆弱性

• CVE-2026-119591中 5.5SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process …
• CVE-2026-119586高 7.8SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-…
• CVE-2026-119379高 7.8SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows …
• CVE-2026-119377低 3.3SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined ta…
• CVE-2026-119376中 5.5SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH limit by chaining…