Vulnerabilidades em SQLite
21 resultadosAnálise Vexday
SQLite apresenta 10 vulnerabilidades catalogadas, com 1 classificada como crítica e 3 divulgadas nos últimos 90 dias, indicando atividade recente de descoberta. Nenhuma vulnerabilidade está sob exploração ativa conhecida (KEV), reduzindo o risco imediato. A fraqueza predominante é CWE-122 (buffer overflow), requerendo validação contínua de atualizações, especialmente nas versões recentes.
CVE-2025-6965HIGHInteger Truncation on SQLiteEPSS 73.5%CVE-2026-119586HIGHSQLite CLI through 3.54.1 Command Injection via .recover OutputEPSS 1.5%CVE-2023-7104MEDIUMSQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflowEPSS 1.5%CVE-2025-3277MEDIUMAn integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer.EPSS 1.3%CVE-2025-71316CRITICALSQLite sqldiff remote code execution via argument injectionEPSS 0.5%CVE-2025-29087LOWIn SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocaEPSS 0.5%CVE-2025-7709MEDIUMOut Of Bounds write in FTS5 Extension in SQLiteEPSS 0.4%CVE-2025-7458MEDIUMSQLite integer overflow in key info allocation may lead to information disclosure.EPSS 0.4%CVE-2026-119379HIGHSQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()EPSS 0.3%CVE-2026-119378MEDIUMSQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()EPSS 0.3%CVE-2026-119374HIGHSQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()EPSS 0.2%CVE-2025-29088MEDIUMIn SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (applicatEPSS 0.2%CVE-2026-11822MEDIUMSQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeekEPSS 0.2%CVE-2026-119375MEDIUMSQLite before 3.54.0 Information Disclosure via WAL Page Size MismatchEPSS 0.2%CVE-2026-119371MEDIUMSQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()EPSS 0.2%CVE-2026-119376MEDIUMSQLite before 3.54.0 Stack Exhaustion via COLLATE Operator ChainEPSS 0.2%CVE-2026-11824HIGHSQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterateEPSS 0.2%CVE-2026-119591MEDIUMSQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES ClauseEPSS 0.2%CVE-2026-119373HIGHSQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()EPSS 0.2%CVE-2026-119372MEDIUMSQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()EPSS 0.1%