Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low2.9dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.EPSS 26.0%May 9, 2025
- Medium5.5In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash).EPSS 0.2%Apr 10, 2025
- Medium5.5A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c.EPSS 0.4%Jan 16, 2024
- High7.3A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical.EPSS 1.5%Dec 29, 2023
- High7.5An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.EPSS 2.4%May 9, 2023
- UnknownHeap-buffer-overflow in sqlite3VdbeExecAug 21, 2022
- High7.5A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query.EPSS 3.9%Aug 24, 2021
- Medium5.5SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.EPSS 0.6%May 24, 2020
- Medium5.5SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.EPSS 1.0%May 24, 2020
- Medium5.3SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c.EPSS 10.7%Dec 24, 2019
- High7.5multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls.EPSS 8.0%Dec 23, 2019
- Medium5.9SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.EPSS 2.7%Nov 27, 2019
- High7.5sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.EPSS 3.6%Nov 25, 2019
- Medium6.5In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a…EPSS 4.3%Sep 9, 2019
- Critical9.8SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.EPSS 45.4%May 30, 2019
- High8.1An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0.EPSS 6.7%May 10, 2019
- High7.5In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c.EPSS 6.1%Mar 22, 2019
- High7.5In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an…EPSS 5.3%Mar 22, 2019
18 records · page 1 of 1
PreviousNext