CVE-2026-119591

概要

参考情報

• abraxaslabs.tech/research/sqlite-values-union · Exploit
• sqlite/sqlite · Product
• sqlite/sqlite · Product
• sqlite/sqlite commit eff50a0 · Patch
• sqlite.org/bugs/info/2026-10-04T05:34:47Z · Issue Tracking
• sqlite.org/releaselog/3_54_0.html · Release Notes
• sqlite.org/src/info/ab621a3e11ee4acc · Vendor Advisory
• vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-countofviewoptimization-in-values-clause · Third Party Advisory

sqlite のその他の脆弱性

• CVE-2026-119586高 7.8SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-…
• CVE-2026-119379高 7.8SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows …
• CVE-2026-119378中 5.5SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed he…
• CVE-2026-119377低 3.3SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined ta…
• CVE-2026-119376中 5.5SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH limit by chaining…