SQLite
SQLite Security Releases - June 2026
sqlite-2026-06 Jun 1, 2026 Source: Vendor
SQLite security advisories for June 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2025-71316
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3
CVE-2025-71316
BR2026-0000-032089
sqldiff
unclaimed
SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL ...
Credited as Vincent55
CVE-2026-11822
BR2026-0000-032120
SQLite
unclaimed
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution ...
Credited as Ashish Kunwar
CVE-2026-11824
BR2026-0000-032121
SQLite
unclaimed
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a craft...
Credited as Ashish Kunwar