There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
CVSS Details
- CVSS 4.0 Base Score: 7.2 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green)
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw64-sqlite-staticUpgrade v8-12.4-develUpgrade sqliteUpgrade nodejs-nodemonUpgrade mingw32-sqlite-staticUpgrade nodejs-full-i18nUpgrade sqlite-libsUpgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejs-docsUpgrade sqlite-develUpgrade nodejs-libsUpgrade mingw64-sqliteUpgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade npmUpgrade sqlite-docUpgrade mingw32-sqliteUpgrade lemon | Jul 29, 2025 | Jul 28, 2025 |
| Alpine Linux | — | Upgrade sqliteUpgrade qt6-qtwebengine | Aug 8, 2025 | Jul 15, 2025 |
| Amazon Linux Ami 2 | — | Upgrade sqlite-debuginfoUpgrade rust-srcUpgrade rustfmtUpgrade sqlite-docUpgrade cargoUpgrade thunderbirdUpgrade rust-toolset-srpm-macrosUpgrade clippyUpgrade rust-docUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade rust-analyzerUpgrade lemonUpgrade rust-gdbUpgrade rust-toolsetUpgrade sqlite-develUpgrade sqliteUpgrade thunderbird-debuginfoUpgrade rustUpgrade sqlite-tcl | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade nodejs22-debugsourceUpgrade rust-debugsourceUpgrade sqlite-libs-debuginfoUpgrade sqlite-analyzerUpgrade rust-gdbUpgrade rustfmtUpgrade nodejs22-docsUpgrade rust-debuginfoUpgrade rust-toolsetUpgrade nodejs22-libsUpgrade sqlite-debuginfoUpgrade rust-analyzer-debuginfoUpgrade rust-lldbUpgrade rust-srcUpgrade rust-std-static-wasm32-wasip1Upgrade sqlite-docUpgrade sqlite-debugsourceUpgrade nodejs22Upgrade sqliteUpgrade rust-analyzerUpgrade lemon-debuginfoUpgrade sqlite-libsUpgrade rust-docUpgrade nodejs22-libs-debuginfoUpgrade sqlite-develUpgrade sqlite-tools-debuginfoUpgrade rustfmt-debuginfoUpgrade nodejs22-full-i18nUpgrade clippy-debuginfoUpgrade cargoUpgrade rust-toolset-srpm-macrosUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade cargo-debuginfoUpgrade nodejs22-develUpgrade clippyUpgrade rust-std-static-wasm32-unknown-unknownUpgrade v8-12.4-develUpgrade rustUpgrade nodejs22-npmUpgrade sqlite-toolsUpgrade sqlite-analyzer-debuginfoUpgrade nodejs22-debuginfoUpgrade lemonUpgrade sqlite-tcl-debuginfoUpgrade sqlite-tcl | Aug 19, 2025 | Jul 15, 2025 |
| Apple Osx Sqlite | — | Upgrade macOS to the latest version | Oct 16, 2025 | Oct 16, 2025 |
| Debian | — | Upgrade sqlite3 | Jul 17, 2025 | Jul 15, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Freebsd | — | Upgrade linux-c7-sqliteUpgrade linux-rl9-sqlite3Upgrade linux_base-rl9Upgrade sqlite3 | Jul 24, 2025 | Jul 23, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sqlite | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade sqlite | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade sqlite | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade sqlite | Oct 24, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sqlite | Jan 8, 2026 | Jan 7, 2026 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory4Apply the fix or workaround for python_advisory17 | Oct 7, 2025 | Oct 6, 2025 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.12 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2026 to the latest version in the current channel channel.Update Microsoft Visual Studio 2022 to the latest version in the current channel channel.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.11 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2017 to the latest version in the LTSC 15.9 version stream, or upgrade to a newer supported version of Visual Studio 2017. | May 26, 2026 | Aug 14, 2025 |
| Microsoft Windows | — | 2026-01 Cumulative Update for Microsoft Windows 11, version 24H2 (KB5074109)2026-01 Cumulative Update for Microsoft Windows 10, version 21H2 (KB5073724)2026-01 Cumulative Update for Microsoft Windows 10, version 22H2 (KB5073724)2026-01 Cumulative Update for Microsoft Windows Server 2025, version 24H2 (KB5073379)2026-01 Cumulative Update for Microsoft Windows 10, version 1809 (KB5073723)2026-01 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5073457)2026-01 Cumulative Update for Microsoft Windows 11, version 23H2 (KB5073455)2026-01 Cumulative Update for Microsoft Windows 10, version 1607 (KB5073722)2026-01 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5073457)2026-01 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5073450)2026-01 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5073722)2026-01 Cumulative Update for Microsoft Windows 11, version 25H2 (KB5074109)2026-01 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5073723) | Apr 14, 2026 | Apr 14, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.8 | Jan 21, 2026 | Jul 15, 2025 |
| Oracle_linux | — | Upgrade nodejs-packagingUpgrade lemonUpgrade sqlite-libsUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade v8-12.4-develUpgrade mingw32-sqliteUpgrade sqlite-develUpgrade nodejs-packaging-bundlerUpgrade mingw64-sqlite-staticUpgrade mingw32-sqlite-staticUpgrade sqlite-tclUpgrade sqlite-docUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-develUpgrade nodejs-libsUpgrade mingw64-sqliteUpgrade sqliteUpgrade nodejs | Jul 29, 2025 | Jul 15, 2025 |
| Redhat_linux | — | Upgrade mingw32-sqliteUpgrade lemon-debuginfoUpgrade nodejs-debuginfoUpgrade sqlite-analyzer-debuginfoUpgrade nodejs-packaging-bundlerUpgrade mingw64-sqliteUpgrade nodejsUpgrade sqlite-tclUpgrade sqlite-debuginfoUpgrade npmUpgrade lemonUpgrade mingw64-sqlite-staticUpgrade sqlite-docUpgrade nodejs-full-i18nUpgrade sqliteUpgrade nodejs-packagingUpgrade sqlite-libs-debuginfoUpgrade nodejs-docsUpgrade nodejs-develNo solution existsUpgrade nodejs-libsUpgrade mingw64-sqlite-debuginfoUpgrade v8-12.4-develUpgrade sqlite-libsUpgrade mingw32-sqlite-staticUpgrade sqlite-tools-debuginfoUpgrade sqlite-debugsourceUpgrade nodejs-libs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade sqlite-develUpgrade sqlite-tcl-debuginfoUpgrade mingw32-sqlite-debuginfo | Jul 16, 2025 | Jul 15, 2025 |
| Rocky_linux | — | Upgrade sqlite-libs-debuginfoUpgrade sqlite-debugsourceUpgrade npmUpgrade nodejs-develUpgrade sqlite-debuginfoUpgrade nodejs-libs-debuginfoUpgrade lemonUpgrade nodejs-debuginfoUpgrade nodejs-libsUpgrade lemon-debuginfoUpgrade sqlite-libsUpgrade nodejs-debugsourceUpgrade nodejsUpgrade nodejs-full-i18nUpgrade sqlite-develUpgrade v8-12.4-develUpgrade sqlite | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade libsqlite3-0-32bitUpgrade sqlite3Upgrade sqlite3-develUpgrade libsqlite3-0Upgrade sqlite3-docUpgrade sqlite3-tclUpgrade libsqlite3-0-x86-64-v3 | Aug 14, 2025 | Jul 31, 2025 |
| Ubuntu | — | Upgrade libsqlite3-0 (Ubuntu Pro)Upgrade libsqlite3-0 | Jul 29, 2025 | Jul 15, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jul 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub