CVE-2026-112048

Versions of libspatialite through 5.1.0 are vulnerable to uncontrolled memory allocation due to a failure to validate the polygon ring count in the ParseWkbPolygon function. An attacker can provide crafted geometry BLOBs—either within a SpatiaLite database or via ST_GeomFromWKB input—to trigger e...

CVE-2026-112048 libspatialite through 5.1.0 Uncontrolled Memory Allocation via ParseWkbPolygon Ring Count

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or STGeomFromWKB input to crash the process or...

EUVD-2026-103510

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or STGeomFromWKB input to crash the process or...