There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
CVSS Details
- CVSS 4.0 Base Score: 7.2 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green)
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sqlite-docUpgrade mingw64-sqliteUpgrade npmUpgrade lemonUpgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade mingw32-sqliteUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade sqlite-libsUpgrade sqliteUpgrade mingw32-sqlite-staticUpgrade nodejs-libsUpgrade mingw64-sqlite-staticUpgrade v8-12.4-develUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade sqlite-devel | Jul 29, 2025 | Jul 28, 2025 |
| Alpine Linux | — | Upgrade qt6-qtwebengineUpgrade sqlite | Aug 8, 2025 | Jul 15, 2025 |
| Amazon Linux Ami 2 | — | Upgrade rust-std-staticUpgrade rust-gdbUpgrade rust-analyzerUpgrade rust-toolsetUpgrade sqliteUpgrade sqlite-develUpgrade rust-debugger-commonUpgrade lemonUpgrade thunderbird-debuginfoUpgrade rustUpgrade sqlite-tclUpgrade rust-toolset-srpm-macrosUpgrade cargoUpgrade sqlite-docUpgrade rust-docUpgrade clippyUpgrade rustfmtUpgrade rust-srcUpgrade thunderbirdUpgrade sqlite-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade rustUpgrade v8-12.4-develUpgrade nodejs22-npmUpgrade sqlite-libsUpgrade rust-std-staticUpgrade rust-std-static-wasm32-unknown-unknownUpgrade cargo-debuginfoUpgrade sqlite-toolsUpgrade sqlite-tclUpgrade sqlite-tcl-debuginfoUpgrade clippy-debuginfoUpgrade nodejs22-full-i18nUpgrade rust-toolset-srpm-macrosUpgrade rustfmt-debuginfoUpgrade nodejs22-libs-debuginfoUpgrade clippyUpgrade nodejs22-develUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-tools-debuginfoUpgrade sqlite-develUpgrade cargoUpgrade nodejs22-debuginfoUpgrade rust-docUpgrade rust-debugger-commonUpgrade lemonUpgrade nodejs22Upgrade nodejs22-libsUpgrade nodejs22-debugsourceUpgrade rust-gdbUpgrade nodejs22-docsUpgrade rustfmtUpgrade rust-analyzer-debuginfoUpgrade sqlite-docUpgrade rust-std-static-wasm32-wasip1Upgrade rust-srcUpgrade rust-debuginfoUpgrade sqlite-libs-debuginfoUpgrade rust-debugsourceUpgrade sqlite-debugsourceUpgrade sqlite-debuginfoUpgrade rust-lldbUpgrade sqlite-analyzerUpgrade lemon-debuginfoUpgrade rust-toolsetUpgrade sqliteUpgrade rust-analyzer | Aug 19, 2025 | Jul 15, 2025 |
| Apple Osx Sqlite | — | Upgrade macOS to the latest version | Oct 16, 2025 | Oct 16, 2025 |
| Debian | — | Upgrade sqlite3 | Jul 17, 2025 | Jul 15, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Freebsd | — | Upgrade linux-c7-sqliteUpgrade linux_base-rl9Upgrade linux-rl9-sqlite3Upgrade sqlite3 | Jul 24, 2025 | Jul 23, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sqlite | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade sqlite | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade sqlite | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade sqlite | Oct 24, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sqlite | Jan 8, 2026 | Jan 7, 2026 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory17Apply the fix or workaround for rpm_advisory4 | Oct 7, 2025 | Oct 6, 2025 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.11 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2017 to the latest version in the LTSC 15.9 version stream, or upgrade to a newer supported version of Visual Studio 2017.Update Microsoft Visual Studio 2022 to the latest version in the current channel channel.Update Microsoft Visual Studio 2026 to the latest version in the current channel channel.Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.12 version stream, or upgrade to a newer supported version of Visual Studio 2022. | May 26, 2026 | Aug 14, 2025 |
| Microsoft Windows | — | 2026-01 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5073722)2026-01 Cumulative Update for Microsoft Windows 11, version 25H2 (KB5074109)2026-01 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5073450)2026-01 Cumulative Update for Microsoft Windows 10, version 1607 (KB5073722)2026-01 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5073457)2026-01 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5073723)2026-01 Cumulative Update for Microsoft Windows 11, version 23H2 (KB5073455)2026-01 Cumulative Update for Microsoft Windows 11, version 24H2 (KB5074109) | Apr 14, 2026 | Apr 14, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.8 | Jan 21, 2026 | Jul 15, 2025 |
| Oracle_linux | — | Upgrade sqliteUpgrade nodejsUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade sqlite-docUpgrade nodejs-libsUpgrade mingw64-sqliteUpgrade nodejs-nodemonUpgrade mingw32-sqlite-staticUpgrade lemonUpgrade mingw64-sqlite-staticUpgrade sqlite-libsUpgrade mingw32-sqliteUpgrade nodejs-docsUpgrade nodejs-packaging-bundlerUpgrade sqlite-tclUpgrade nodejs-packagingUpgrade sqlite-develUpgrade v8-12.4-devel | Jul 29, 2025 | Jul 15, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Jul 15, 2025 |
| Redhat_linux | — | Upgrade nodejsUpgrade sqlite-debuginfoUpgrade mingw32-sqliteUpgrade npmUpgrade mingw64-sqlite-staticUpgrade lemonUpgrade sqlite-docUpgrade mingw64-sqliteUpgrade sqlite-analyzer-debuginfoUpgrade lemon-debuginfoUpgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade sqlite-tclUpgrade nodejs-packaging-bundlerUpgrade nodejs-debugsourceUpgrade sqliteUpgrade sqlite-tools-debuginfoUpgrade sqlite-debugsourceUpgrade mingw32-sqlite-staticUpgrade mingw32-sqlite-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade v8-12.4-develUpgrade sqlite-libsUpgrade nodejs-libsUpgrade nodejs-develUpgrade nodejs-docsUpgrade mingw64-sqlite-debuginfoNo solution existsUpgrade sqlite-develUpgrade sqlite-tcl-debuginfoUpgrade nodejs-libs-debuginfoUpgrade sqlite-libs-debuginfo | Jul 16, 2025 | Jul 15, 2025 |
| Rocky_linux | — | Upgrade nodejs-libs-debuginfoUpgrade sqlite-libsUpgrade sqliteUpgrade lemon-debuginfoUpgrade nodejs-libsUpgrade nodejs-debugsourceUpgrade lemonUpgrade sqlite-develUpgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejsUpgrade v8-12.4-develUpgrade npmUpgrade sqlite-debuginfoUpgrade sqlite-libs-debuginfoUpgrade sqlite-debugsourceUpgrade nodejs-devel | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade sqlite3-docUpgrade sqlite3-tclUpgrade libsqlite3-0-x86-64-v3Upgrade libsqlite3-0Upgrade sqlite3-develUpgrade libsqlite3-0-32bitUpgrade sqlite3 | Aug 14, 2025 | Jul 31, 2025 |
| Ubuntu | — | Upgrade libsqlite3-0 (Ubuntu Pro)Upgrade libsqlite3-0 | Jul 29, 2025 | Jul 15, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jul 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub