CVE-2026-119371

Mô tả

Tham khảo

• abraxaslabs.tech/research/sqlite-cte-nest · Exploit
• sqlite/sqlite · Product
• sqlite/sqlite · Patch
• sqlite/sqlite commit e6ff280 · Patch
• sqlite.org/bugs/info/2026-10-04T04:58:58Z · Issue Tracking
• sqlite.org/releaselog/3_54_0.html · Release Notes
• sqlite.org/src/info/f54730871303e655 · Patch
• vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-cte-chain-in-selectexpander · Third Party Advisory

Lỗ hổng khác của sqlite

• CVE-2026-119591TRUNG BÌNH 5.5SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process …
• CVE-2026-119586CAO 7.8SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-…
• CVE-2026-119379CAO 7.8SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows …
• CVE-2026-119378TRUNG BÌNH 5.5SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed he…
• CVE-2026-119377THẤP 3.3SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined ta…