https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 01 Nov 2026 00:29:29 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-119591 <p>SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TK_PLUS expressions whose recursive freeing in sqlite3ExprDeleteNN() exhausts the C stack, causing denial of service.</p> <p>SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TK_PLUS expressions whose recursive freeing in sqlite3ExprDeleteNN() exhausts the C stack, causing denial of service.</p> https://db.gcve.eu/vuln/fkie_cve-2026-119591 https://db.gcve.eu/vuln/ghsa-24xm-6g3f-6mqq <p>SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TK_PLUS expressions whose recursive freeing in sqlite3ExprDeleteNN() exhausts the C stack, causing denial of service.</p> <p>SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TK_PLUS expressions whose recursive freeing in sqlite3ExprDeleteNN() exhausts the C stack, causing denial of service.</p> https://db.gcve.eu/vuln/ghsa-24xm-6g3f-6mqq https://db.gcve.eu/vuln/msrc_cve-2026-119591 msrc_CVE-2026-119591 https://db.gcve.eu/vuln/msrc_cve-2026-119591 https://db.gcve.eu/vuln/rhsa-2026:86202 <p>sqlite: sqlite: Denial of service via heap-based buffer overflow in FTS5 sqlite: sqlite: Denial of Service via use-after-free in R-Tree extension sqlite: sqlite: Denial of Service via stack exhaustion in countOfViewOptimization()</p> <p>sqlite: sqlite: Denial of service via heap-based buffer overflow in FTS5 sqlite: sqlite: Denial of Service via use-after-free in R-Tree extension sqlite: sqlite: Denial of Service via stack exhaustion in countOfViewOptimization()</p> https://db.gcve.eu/vuln/rhsa-2026:86202