sqlite

An integer-truncation bug in SQLite — tracked as CVE-2025-6965 — has been confirmed and fixed upstream; the flaw can cause memory corruption when an aggregate query references more columns than the engine expects, and defenders must treat any embedded or statically linked SQLite instances that...

A denial-of-service flaw in SQLite 3.25.2 — tracked as CVE-2018-20505 — can be triggered by queries run against a table with a malformed PRIMARY KEY, allowing an attacker who can inject SQL (for example via certain WebSQL scenarios) to crash the host application and deny service to users...

The discovery and public assignment of CVE-2019-19317 put a spotlight on a subtle but consequential SQLite code-path involving generated columns and the query resolver’s column-usage tracking, with researchers and vendors converging on a short, surgical fix in the SQLite source tree. At a high...

Siemens’s RUGGEDCOM CROSSBOW Station Access Controller (SAC) has been identified as vulnerable to multiple memory‑corruption flaws in the embedded SQLite component that—if left unpatched—could allow remote attackers to crash devices or execute arbitrary code; Siemens recommends updating affected...