CVE-2026-119378

SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %node shadow table. Attackers can supply a database declaring %node WITHOUT ROWID or with a RAISEIGNORE trigger so nodeWrite...

CVE-2026-119378 SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()

SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %node shadow table. Attackers can supply a database declaring %node WITHOUT ROWID or with a RAISEIGNORE trigger so nodeWrite...

CVE-2026-119378 SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()

SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %node shadow table. Attackers can supply a database declaring %node WITHOUT ROWID or with a RAISEIGNORE trigger so nodeWrite...

CVE-2026-119378

SQLite versions prior to 3.54.0 are vulnerable to a use-after-free vulnerability within the R-Tree extension . The root cause lies in the nodeWrite() function, where attackers can manipulate the %_node shadow table to force the application to use freed heap memory. Specifically, by supplying a da...

EUVD-2026-113789

SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %node shadow table. Attackers can supply a database declaring %node WITHOUT ROWID or with a RAISEIGNORE trigger so nodeWrite...

PT-2026-133462

SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the % node shadow table. Attackers can supply a database declaring % node WITHOUT ROWID or with a RAISEIGNORE trigger so nodeWrite...

CVE-2026-119378: SQLite: SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make…

SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %node shadow table. Attackers can supply a database declaring %node WITHOUT ROWID or with a RAISEIGNORE trigger so nodeWrite...