sqlite Vulnerability Advisory Catalog

Total 58 security vulnerabilities recorded for sqlite software and firmware.

← Back to All Vendors
Component: sqlite

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur a...

📅 2018-12-21
CVSS 8.1 Dossier →
Component: sqlite

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to bui...

📅 2018-03-17
CVSS 7.5 Dossier →
Component: sqlite

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLI...

📅 2017-10-12
CVSS 7.5 Dossier →
Component: sqlite

The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted ...

📅 2017-08-29
CVSS 5.5 Dossier →
CVE-2017-10989 CRITICAL
Component: sqlite

The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a cra...

📅 2017-07-07
CVSS 9.8 Dossier →
CVE-2016-6153 MEDIUM
Component: sqlite

os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive in...

📅 2016-09-26
CVSS 5.9 Dossier →
CVE-2015-6607 UNKNOWN
Component: sqlite

SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586....

📅 2015-10-06
CVSS 6.8 Dossier →
CVE-2015-5895 UNKNOWN
Component: sqlite

Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors....

📅 2015-09-18
CVSS 10.0 Dossier →
CVE-2015-3717 UNKNOWN
Component: sqlite

Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to ex...

📅 2015-07-03
CVSS 7.5 Dossier →
CVE-2015-3414 UNKNOWN
Component: sqlite

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial ...

📅 2015-04-24
CVSS 7.5 Dossier →
Page 3 of 3 (58 Total Records)