# SQLite.

Every CVE that names SQLite among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause](https://agentprime.io/advisories/CVE-2026-119591.md)
  `CVE-2026-119591` · CVE record: SQLite SQLite · CVSS 6.8 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Denial of service
- [SQLite CLI through 3.54.1 Command Injection via .recover Output](https://agentprime.io/advisories/CVE-2026-119586.md)
  `CVE-2026-119586` · CVE record: SQLite SQLite · CVSS 8.5 High · Not analysed yet · Published 30 Oct 2026 · Tags: Command injection
- [SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()](https://agentprime.io/advisories/CVE-2026-119379.md)
  `CVE-2026-119379` · CVE record: SQLite SQLite · CVSS 8.5 High · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption
- [SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()](https://agentprime.io/advisories/CVE-2026-119378.md)
  `CVE-2026-119378` · CVE record: SQLite SQLite · CVSS 6.8 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption
- [SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING](https://agentprime.io/advisories/CVE-2026-119377.md)
  `CVE-2026-119377` · CVE record: SQLite SQLite · CVSS 2.0 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Broken access control
- [SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain](https://agentprime.io/advisories/CVE-2026-119376.md)
  `CVE-2026-119376` · CVE record: SQLite SQLite · CVSS 6.8 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Denial of service
- [SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch](https://agentprime.io/advisories/CVE-2026-119375.md)
  `CVE-2026-119375` · CVE record: SQLite SQLite · CVSS 6.8 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption
- [SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()](https://agentprime.io/advisories/CVE-2026-119374.md)
  `CVE-2026-119374` · CVE record: SQLite SQLite · CVSS 8.5 High · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption
- [SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()](https://agentprime.io/advisories/CVE-2026-119373.md)
  `CVE-2026-119373` · CVE record: SQLite SQLite · CVSS 8.5 High · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption
- [SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()](https://agentprime.io/advisories/CVE-2026-119372.md)
  `CVE-2026-119372` · CVE record: SQLite SQLite · CVSS 6.8 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption
- [SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()](https://agentprime.io/advisories/CVE-2026-119371.md)
  `CVE-2026-119371` · CVE record: SQLite SQLite · CVSS 6.8 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Denial of service
- [SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate](https://agentprime.io/advisories/CVE-2026-11824.md)
  `CVE-2026-11824` · CVE record: SQLite SQLite · CVSS 8.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek](https://agentprime.io/advisories/CVE-2026-11822.md)
  `CVE-2026-11822` · CVE record: SQLite SQLite · CVSS 6.8 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [SQLite integer overflow in key info allocation may lead to information disclosure.](https://agentprime.io/advisories/CVE-2025-7458.md)
  `CVE-2025-7458` · CVE record: SQLite SQLite · CVSS 6.9 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: Memory corruption
- [Heap-based buffer overflow in sqlite](https://agentprime.io/advisories/CVE-2025-3277.md)
  `CVE-2025-3277` · CVE record: SQLite sqlite · CVSS 6.9 Medium · Not analysed yet · Published 14 Apr 2025 · Tags: Memory corruption
- [Integer overflow in SQLite](https://agentprime.io/advisories/CVE-2025-29088.md)
  `CVE-2025-29088` · CVE record: SQLite SQLite · CVSS 5.6 Medium · Not analysed yet · Published 10 Apr 2025 · Tags: Memory corruption
- [Integer overflow in SQLite](https://agentprime.io/advisories/CVE-2025-29087.md)
  `CVE-2025-29087` · CVE record: SQLite SQLite · CVSS 3.2 Low · Not analysed yet · Published 7 Apr 2025 · Tags: Memory corruption
- [Buffer overflow in sqlite](https://agentprime.io/advisories/CVE-2020-35527.md)
  `CVE-2020-35527` · CVE record: sqlite · No CVSS score · Not analysed yet · Published 1 Sept 2022 · Tags: Memory corruption
- [NULL pointer dereference in sqlite](https://agentprime.io/advisories/CVE-2020-35525.md)
  `CVE-2020-35525` · CVE record: sqlite · No CVSS score · Not analysed yet · Published 1 Sept 2022 · Tags: Memory corruption
- [Use after free in sqlite](https://agentprime.io/advisories/CVE-2021-20227.md)
  `CVE-2021-20227` · CVE record: sqlite · No CVSS score · Not analysed yet · Published 23 Mar 2021 · Tags: Memory corruption
- [Out-of-bounds read in SQLite](https://agentprime.io/advisories/CVE-2019-8457.md)
  `CVE-2019-8457` · CVE record: SQLite · No CVSS score · EPSS 0.45 · Not analysed yet · Published 30 May 2019 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=sqlite>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/sqlite/>. Everything for agents: <https://agentprime.io/llms.txt>.