SQLite report about CVE-2025-7709

An attacker who has complete control over the database content could create a corrupt FTS5 index resulting access to memory outside the bounds of an array due to integer overflow. Fixed on 2025-07-15...

SQLite report about CVE-2025-52099

Duplicate of CVE-2025-29088...

SQLite report about CVE-2020-13435CVE-2021-0646

Malicious SQL statement causes a read access to a NULL pointer and denial of service. details...

SQLite report about CVE-2026-119586

An attacker who can control the content of a database file can arrange for the output from the .recover dot-command to contain other dot-commands, including commands like ".shell". If the attacker can then trick the victim into running .recover on such a crafted database and piping the output int...