SQLite report about CVE-2025-3277CVE-2025-29087

A bug in the concatws SQL function can cause a write past the end of an array obtained from malloc. If an attacker can control the first argument to concatws, so that the separator string is large - more than 2MB - then an integer overflow in the calculation of the size of the result buffer might...

SQLite report about CVE-2020-13435CVE-2021-0646

Malicious SQL statement causes a read access to a NULL pointer and denial of service. details...

SQLite report about CVE-2026-51296CVE-2026-51297CVE-2026-51300CVE-2026-51302CVE-2026-51303CVE-2026-51304

These are unreproducible. They appear to be AI hallucinations. See the analysis at JFrog.com...