Buffer Overflow in SQLite Source Snapshots

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: MITRE

Description

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an attacker to cause a denial of service via the ext/misc/sqlar.c, sqlarUncompressFunc(), sqlar_uncompress(), sqlite3_value_int64(), sqlite3_malloc(int), uncompress() components

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-25

Generated

2026-08-26

AI Q&A

2026-08-26

EPSS Evaluated

N/A

NVD

CVE-2026-39113

Affected Vendors & Products

Vendor	Product	Version / Range
sqlite	sqlite	From 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Buffer Overflow vulnerability in SQLite versions after Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (March 11, 2026). It allows an attacker to cause a denial of service by exploiting issues in ext/misc/sqlar.c, sqlarUncompressFunc(), sqlar_uncompress(), sqlite3_value_int64(), sqlite3_malloc(int), and uncompress() functions.

Impact Analysis

The vulnerability can cause a denial of service, meaning affected systems may crash or become unresponsive. This could disrupt services relying on SQLite databases, leading to downtime or loss of functionality.

Hi! I’m here to help you understand CVE-2026-39113. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70