https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 01 Nov 2026 00:30:03 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-119373 <p>SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process.</p> <p>SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process.</p> https://db.gcve.eu/vuln/fkie_cve-2026-119373 https://db.gcve.eu/vuln/ghsa-mw7g-h5m4-mrxh <p>SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process.</p> <p>SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process.</p> https://db.gcve.eu/vuln/ghsa-mw7g-h5m4-mrxh https://db.gcve.eu/vuln/msrc_cve-2026-119373 msrc_CVE-2026-119373 https://db.gcve.eu/vuln/msrc_cve-2026-119373 https://db.gcve.eu/vuln/rhsa-2026:86202 <p>sqlite: sqlite: Denial of service via heap-based buffer overflow in FTS5 sqlite: sqlite: Denial of Service via use-after-free in R-Tree extension sqlite: sqlite: Denial of Service via stack exhaustion in countOfViewOptimization()</p> <p>sqlite: sqlite: Denial of service via heap-based buffer overflow in FTS5 sqlite: sqlite: Denial of Service via use-after-free in R-Tree extension sqlite: sqlite: Denial of Service via stack exhaustion in countOfViewOptimization()</p> https://db.gcve.eu/vuln/rhsa-2026:86202