SUSE CVE-2026-112048

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or STGeomFromWKB input to crash the process or...

PT-2026-116631

Name of the Vulnerable Software and Affected Versions libspatialite versions prior to 5.1.1 Description The software fails to validate the polygon ring count within the ParseWkbPolygon function. This allows an attacker to trigger uncontrolled interior-ring allocation by providing crafted geometry...

SpatiaLite resource management error vulnerability

SpatiaLite 5.1.0 and earlier versions have a resource management vulnerability. This vulnerability stems from ParseWkbPolygon not verifying the number of looped edges in polygons. Attackers can exploit this by using specially crafted geometry BLOBs to trigger uncontrolled internal loop assignment...

SpatiaLite numerical error vulnerability

SpatiaLite 5.1.0 and earlier versions have a numerical error vulnerability. This vulnerability stems from integer overflows in the size checks for WKB points and vertices during the ParseWkbLine function and related parsers in ggwkb.c. This could lead to out-of-bounds reads. An attacker could...

[SECURITY] Fedora 45 Update: spatialite-tools-5.1.0a-8.fc45

Spatialite-Tools is a set of useful CLI tools for SpatiaLite...

[SECURITY] Fedora 45 Update: libspatialite-5.1.0-14.fc45

SpatiaLite is a a library extending the basic SQLite core in order to get a full fledged Spatial DBMS, really simple and lightweight, but mostly OGC-SFS compliant...

[SECURITY] Fedora 36 Update: libspatialite-5.0.1-12.fc36

SpatiaLite is a a library extending the basic SQLite core in order to get a full fledged Spatial DBMS, really simple and lightweight, but mostly OGC-SFS compliant...

Fedora Update for spatialite-tools FEDORA-2018-ccbe8b931c

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 29 : spatialite-tools / sqlite (2018-ccbe8b931c)

Security fix for fts3/4 corrupt database exploit sqlite rebased to version 3.26.0 per: https://sqlite.org/releaselog/3260.html spatialite-tools rebuilt for latest sqlite version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

[SECURITY] Fedora 29 Update: spatialite-tools-4.3.0-31.fc29

Spatialite-Tools is a set of useful CLI tools for SpatiaLite...

FreeXL Fixes Two RCE Vulnerabilities

Researchers warned Monday of two remote code execution vulnerabilities in an open source C library that could let an attacker execute code with local user privileges. The library, FreeXL, was updated last week to fix the issues. It allows users to extract valid data from within an Excel .xls...

FreeXL BIFF Dimension Marker Code Execution Vulnerability

Summary An exploitable heap-based buffer overflow vulnerability exists in the readlegacybiff function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Tested...

Fedora 26 : spatialite-tools / sqlite (2017-5f2b220c7c)

Update to Version 3.20.0. Security fix for CVE-2017-7000 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Update for spatialite-tools FEDORA-2017-5f2b220c7c

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 26 Update: spatialite-tools-4.3.0-24.fc26

Spatialite-Tools is a set of useful CLI tools for SpatiaLite...

Fedora Update for spatialite-tools FEDORA-2017-357f9df699

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : spatialite-tools / sqlite (2017-357f9df699)

Security fix for CVE-2017-10989: Heap-buffer overflow in the getNodeSize function Additionally sqlite has been updated to version 3.19.3, and spatialite-tools rebuilt for the update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

[SECURITY] Fedora 26 Update: spatialite-tools-4.3.0-23.fc26

Spatialite-Tools is a set of useful CLI tools for SpatiaLite...

Fedora Update for spatialite-tools FEDORA-2015-6157

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : spatialite-tools-4.1.1-12.fc20 / sqlite-3.8.9-1.fc20 (2015-6349)

Update of sqlite to latest upstream version, with spatialite-tools rebuild. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...