Vulnerabilities in SQLite
10 resultsVexday analysis
SQLite apresenta 10 vulnerabilidades catalogadas, com 1 classificada como crítica e 3 divulgadas nos últimos 90 dias, indicando atividade recente de descoberta. Nenhuma vulnerabilidade está sob exploração ativa conhecida (KEV), reduzindo o risco imediato. A fraqueza predominante é CWE-122 (buffer overflow), requerendo validação contínua de atualizações, especialmente nas versões recentes.
CVE-2025-6965HIGHInteger Truncation on SQLiteEPSS 74.9%CVE-2023-7104MEDIUMSQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflowEPSS 1.2%CVE-2025-3277MEDIUMAn integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer.EPSS 0.8%CVE-2025-29087LOWIn SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocaEPSS 0.5%CVE-2025-71316CRITICALSQLite sqldiff remote code execution via argument injectionEPSS 0.4%CVE-2025-7709MEDIUMOut Of Bounds write in FTS5 Extension in SQLiteEPSS 0.3%CVE-2025-7458MEDIUMSQLite integer overflow in key info allocation may lead to information disclosure.EPSS 0.2%CVE-2025-29088MEDIUMIn SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (applicatEPSS 0.2%CVE-2026-11824HIGHSQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterateEPSS 0.2%CVE-2026-11822HIGHSQLite before 3.53.2 Memory Corruption in FTS5 ExtensionEPSS 0.2%