Lucene search
+L

19 matches found

PyPA
PyPA
•added 2026/07/07 2:34 p.m.•25 views

Heap-based Buffer Overflow in sqlite-vec

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

9.1CVSS6.2AI score0.00438EPSS
SaveExploits2References7Affected Software1
osv_pysec
osv_pysec
•added 2026/07/07 2:34 p.m.•24 views

PYSEC-2026-1938 Heap-based Buffer Overflow in sqlite-vec

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

9.1CVSS6.2AI score0.00438EPSS
SaveExploits2References7
vulnersOsv
vulnersOsv
•added 2026/07/07 2:34 p.m.•2 views

datasette-sqlite-vec (>=0.1.1a2, <=0.1.3a3), sqlite-utils-sqlite-vec (>=0.1.1a2, <=0.1.3a3) +1 more potentially affected by CVE-2024-46488 via sqlite-vec (>=0.1.1a2, <=0.1.3a3)

sqlite-vec PYPI version =0.1.1a2, =0.1.1a2, =0.1.1a2, =0.1.3a3 - zf-memician 0.1.3 Source cves: CVE-2024-46488 Source advisory: OSV:PYSEC-2026-1938...

9.1CVSS5.8AI score0.00438EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2025/05/23 8:33 a.m.•22 views

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

9.1CVSS6.3AI score0.00438EPSS
SaveExploits2References1
Veracode
Veracode
•added 2024/09/27 7:03 a.m.•31 views

Heap Buffer Overflow

SQLite-vec is vulnerable to a Heap Buffer Overflow. The vulnerability is due to improper handling of memory allocation in the npytokennext function, which allows for a heap buffer overflow when processing certain crafted files...

9.1CVSS6.4AI score0.00438EPSS
SaveExploits2References4Affected Software9
vulnersOsv
vulnersOsv
•added 2024/09/25 6:31 p.m.•2 views

datasette-sqlite-vec (>=0.1.1a2, <=0.1.3a3), sqlite-utils-sqlite-vec (>=0.1.1a2, <=0.1.3a3) +1 more potentially affected by CVE-2024-46488 via sqlite-vec (>=0.1.1a2, <=0.1.3a3)

sqlite-vec PYPI version =0.1.1a2, =0.1.1a2, =0.1.1a2, =0.1.3a3 - zf-memician 0.1.3 Source cves: CVE-2024-46488 Source advisory: OSV:GHSA-VRCX-GX3G-J3H8...

9.1CVSS5.8AI score0.00438EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2024/09/25 6:31 p.m.•3 views

datasette-sqlite-vec (>=0.1.1a2, <=0.1.3a3), sqlite-utils-sqlite-vec (>=0.1.1a2, <=0.1.3a3) +1 more potentially affected by CVE-2024-46488 via sqlite-vec (>=0.1.1a2, <=0.1.3a3)

sqlite-vec PYPI version =0.1.1a2, =0.1.1a2, =0.1.1a2, =0.1.3a3 - zf-memician 0.1.3 Source cves: CVE-2024-46488 Source advisory: GHSA-VRCX-GX3G-J3H8...

9.1CVSS5.8AI score0.00438EPSS
SaveExploits2
Github Security Blog
Github Security Blog
•added 2024/09/25 6:31 p.m.•50 views

Heap-based Buffer Overflow in sqlite-vec

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

9.1CVSS6.2AI score0.00438EPSS
SaveExploits2References5Affected Software1
NVD
NVD
•added 2024/09/25 6:15 p.m.•28 views

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

9.1CVSS0.00438EPSS
SaveExploits2References1
osv_cve
osv_cve
•added 2024/09/25 6:15 p.m.•22 views

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

5.5CVSS6.2AI score0.00438EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2024/09/25 12:00 a.m.•15 views

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

6.2AI score0.00438EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2024/09/25 12:00 a.m.•37 views

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

0.00438EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•11 views

CVE-2024-46488: Out-of-bounds Write

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

9.1CVSS6.3AI score0.00438EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2024/09/25 12:00 a.m.•23 views

PT-2024-32012

Name of the Vulnerable Software and Affected Versions sqlite-vec version 0.1.1 Description The issue is related to a heap buffer overflow via the npy token next function, allowing attackers to cause a Denial of Service DoS via a crafted file. Recommendations For sqlite-vec version 0.1.1, upgrade ...

9.1CVSS6.3AI score0.00438EPSS
SaveExploits2References15
vulnersOsv
vulnersOsv
•added 2024/09/25 12:00 a.m.•6 views

datasette-sqlite-vec (>=0.1.1a2, <=0.1.3a3), sqlite-utils-sqlite-vec (>=0.1.1a2, <=0.1.3a3) +1 more potentially affected by CVE-2024-46488 via sqlite-vec (>=0.1.1a2, <=0.1.3a3)

sqlite-vec PYPI version =0.1.1a2, =0.1.1a2, =0.1.1a2, =0.1.3a3 - zf-memician 0.1.3 Source cves: CVE-2024-46488 Source advisory: MEND:CVE-2024-46488...

9.1CVSS5.8AI score0.00438EPSS
SaveExploits2
CNNVD
CNNVD
•added 2024/09/25 12:00 a.m.•15 views

sqlite-vec security vulnerability

sqlite-vec is a SQLite extension from the individual developer Alex Garcia. A security vulnerability exists in sqlite-vec version v0.1.1, which stems from the presence of a heap buffer overflow that allows an attacker to cause a denial of service DoS via a crafted file...

9.1CVSS6.2AI score0.00438EPSS
SaveExploits2References2
Mend
Mend
•added 2024/09/25 12:00 a.m.•11 views

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

9.1CVSS6.2AI score0.00438EPSS
SaveExploits2References7
CVE
CVE
•added 2024/09/25 12:00 a.m.•76 views

CVE-2024-46488

The sqlite-vec extension (v0.1.1) is vulnerable to a heap buffer overflow within the npy_token_next function. An attacker can exploit this flaw by providing a crafted file , resulting in a Denial of Service (DoS) . To resolve this issue, users are recommended to upgrade to version 0.1.3 .

9.1CVSS6.2AI score0.00438EPSS
SaveExploits2References1Affected Software1
RubySec
RubySec
•added 2024/09/25 12:00 a.m.•34 views

Heap-based Buffer Overflow in sqlite-vec

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file. Workaround for CVE in release 0.1.3...

9.1CVSS6.1AI score0.00438EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder