SQLite vulnerabilities
We track 12 vulnerabilities in SQLite products across 3 products. 12 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
Latest SQLite vulnerabilities
- 7.8 High severity
SQLite: Improper Neutralization of Special Elements used in a Command
SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqlite_schema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE s
- 7.8 High severity
SQLite: Out-of-bounds Write
SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changese
- 7.8 High severity
SQLite: Out-of-bounds Write
SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when de
- 7.8 High severity
SQLite: Out-of-bounds Write
SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix
- 7.8 High severity
SQLite: Heap-based Buffer Overflow
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifyin
- 9.8 Critical severity
sqldiff: Improper Handling of Unicode Encoding
SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in comm
- 7.5 High severity
RUGGEDCOM CROSSBOW Station Access Controller…: Improper Clearing of Heap Memory Before Release
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
- 9.1 Critical severity
SQLite: Integer Overflow or Wraparound
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory v
- 7.7 High severity
SQLite: Numeric Truncation Error
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
- 9.8 Critical severity
sqlite: Integer Overflow or Wraparound
An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap
- 7.5 High severity
SQLite: Integer Overflow or Wraparound
In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer over
- 7.3 High severity
SQLite3: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer o