CVE-2026-39113

CVE-2026-39113：SQLite 可选 SQLAR 扩展中的堆缓冲区溢出 执行摘要 CVE-2026-39113 是 SQLite 可选 SQLAR 扩展中的一个堆缓冲区溢出漏洞。在已加载该扩展的应用程序中，能够使用受控的压缩 blob 和大小调用 sqlaruncompress 的攻击者，可以在 LP64 系统上导致 zlib 在堆分配之外写入。这是宿主进程内部的内存安全边界故障；它不是 SQLite 数据库文件解析问题、认证绕过，也不是每个默认 SQLite 部署中均可触及的缺陷。 该漏洞行为于 2026-03-11 由 Git 提交 169f68e（Fossil...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : SQLite vulnerability (USN-8775-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8775-1 advisory. It was discovered that SQLite was vulnerable to a buffer overflow in the sqlar extension. If a user were tricked...

The vulnerabilities of the sqlar_compress() and sqlar_uncompress() functions in the SQLite database management system’s SQLAR extension allow attackers to cause a service failure.

The vulnerability of the sqlarcompress and sqlaruncompress functions in the SQLite database management system’s SQLAR extension involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-39113

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11 and later snapshots/builds allows an attacker to cause a...