CVE-2026-119379

SQLite versions before 3.54.0 built with the session extension are vulnerable to a heap buffer overflow in sqlite3changeset_apply(). An attacker can corrupt heap memory by providing crafted changesets that repeat a table name in a second block with a larger column count. This causes sessionUpdate...