CVE-2026-119379 SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()

SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changesetapply that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count,...

CVE-2026-119379 SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()

SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changesetapply that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count,...

CVE-2026-119379 SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()

SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changesetapply that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count,...

CVE-2026-119379

SQLite versions before 3.54.0 built with the session extension are vulnerable to a heap buffer overflow in sqlite3changeset_apply(). An attacker can corrupt heap memory by providing crafted changesets that repeat a table name in a second block with a larger column count. This causes sessionUpdate...

PT-2026-133463

SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset apply that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count,...