Skip to content

Sqlite · weakness class

Memory Corruption

46 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
4

Every one of the 46 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Integer Truncation on SQLiteCVE-2025-6965SQLite · CVSS 7.2 · 73% likely

    CWE-197

  2. SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.CVE-2019-8457Sqlite · 45% likely

    CWE-125

  3. SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.CVE-2022-35737Sqlite · CVSS 7.5 · 24% likely

    CWE-129

  4. SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3…CVE-2018-20346Sqlite · 10% likely

    CWE-190

  5. In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.CVE-2020-11656Sqlite · 8.7% likely

    CWE-416

  6. The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a h…CVE-2017-10989Sqlite · 8.6% likely

    CWE-125

  7. multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists bec…CVE-2019-19926Sqlite · 8.0% likely

    CWE-476

  8. In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.CVE-2018-8740Sqlite · 8.0% likely

    CWE-476

  9. SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after…CVE-2018-20506Sqlite · 7.5% likely

    CWE-190

  10. exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definition…CVE-2019-19880Sqlite · 6.9% likely

    CWE-476

  11. flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer…CVE-2019-19923Sqlite · 6.8% likely

    CWE-476

  12. An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability…CVE-2019-5018Sqlite · CVSS 8.1 · 6.7% likely

    CWE-416

  13. The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-depende…CVE-2015-3416Sqlite · 5.4% likely

    CWE-190

  14. lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly hav…CVE-2019-19317Sqlite · 4.7% likely

    CWE-681

  15. Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause…CVE-2015-3717Sqlite · 4.5% likely

    CWE-120

  16. SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.CVE-2020-13871Sqlite · 4.4% likely

    CWE-416

  17. SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is misha…CVE-2020-11655Sqlite · 4.3% likely

    CWE-665

  18. SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized mem…CVE-2015-3414Sqlite · 4.1% likely

    CWE-908

  19. In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.CVE-2020-9327Sqlite · 3.7% likely

    CWE-476

  20. Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (crash) via crafted SQL statements.CVE-2013-7443Sqlite · 3.2% likely

    CWE-119

  21. SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data s…CVE-2017-15286Sqlite · 2.9% likely

    CWE-476

  22. SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.CVE-2019-19242Sqlite · 2.7% likely

    CWE-476

  23. An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.CVE-2021-31239Sqlite · CVSS 7.5 · 2.4% likely

    CWE-125

  24. In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.CVE-2020-35527Sqlite · 1.7% likely

    CWE-119

  25. In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.CVE-2020-35525Sqlite · 1.6% likely

    CWE-476

  26. SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflowCVE-2023-7104SQLite · CVSS 5.5 · 1.5% likely

    CWE-122

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in