CVEs (70)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
5Netapp OracleSiemens+2 more6Cloud Backup Mysql WorkbenchOntap Select Deploy Administration Utility+3 moreJun 17, 2026 Dec 9, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns. |
5Apache NetappOracle+2 more6Cloud Backup GuacamoleMysql Workbench+3 moreJun 17, 2026 Dec 9, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash. |
5Netapp OracleSiemens+2 more6Cloud Backup Mysql WorkbenchOntap Select Deploy Administration Utility+3 moreJun 17, 2026 Dec 9, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements. |
4Netapp OracleSiemens+1 more5Cloud Backup Mysql WorkbenchOntap Select Deploy Administration Utility+2 moreJun 17, 2026 Dec 5, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact. |
5Canonical OracleRedhat+2 more5Enterprise Linux Mysql WorkbenchSinec Infrastructure Network Services+2 moreJun 17, 2026 Nov 27, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c. |
4Canonical OracleSiemens+1 more4Mysql Workbench Sinec Infrastructure Network ServicesSqlite+1 moreJun 17, 2026 Nov 25, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage. |
8Canonical DebianFedoraproject+5 more20Active Iq Unified Manager Communications Design StudioDebian Linux+17 moreJun 17, 2026 Sep 9, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner." |
4Canonical FedoraprojectOpensuse+1 more4Fedora LeapSqlite+1 moreJun 17, 2026 May 30, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables. |
2Canonical Sqlite2Sqlite Ubuntu LinuxJun 17, 2026 May 10, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code ex...Show more |
3Apple OpensuseSqlite8Icloud Iphone OsItunes+5 moreNov 21, 2024 Apr 3, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, al...Show more |
2Apple Sqlite6Icloud Iphone OsItunes+3 moreNov 21, 2024 Apr 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in...Show more |
In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext...Show more |
In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5_ha...Show more |
5Debian GoogleOpensuse+2 more5Chrome Debian LinuxLeap+2 moreNov 21, 2024 Dec 21, 2018 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers...Show more |
2Debian Sqlite2Debian Linux SqliteJun 17, 2026 Mar 17, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c. |
SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized. |
The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file. |
The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly un...Show more |
3Fedoraproject OpensuseSqlite3Fedora LeapSqliteMay 6, 2026 Sep 26, 2016 N/A· v4 5.9 MEDIUM· v3 4.6 MEDIUM· v2 os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unsp...Show more |
SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586. |