CVE-2026-39113

CVE-2026-39113 is a heap buffer overflow in SQLite's optional SQLAR extension (ext/misc/sqlar.c). A 64-bit size read via sqlite3_value_int64() is narrowed when passed to sqlite3_malloc(int), while the full 64-bit value is retained for zlib's uncompress(), causing an undersized allocation and out-...