There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
CVSS Details
- CVSS 4.0 Base Score: 7.2 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green)
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw32-sqliteUpgrade mingw64-sqliteUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade lemonUpgrade sqlite-docUpgrade nodejsUpgrade sqlite-develUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade sqlite-libsUpgrade nodejs-docsUpgrade v8-12.4-develUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade mingw32-sqlite-staticUpgrade mingw64-sqlite-staticUpgrade sqlite | Jul 29, 2025 | Jul 28, 2025 |
| Alpine Linux | — | Upgrade qt6-qtwebengineUpgrade sqlite | Aug 8, 2025 | Jul 15, 2025 |
| Amazon Linux Ami 2 | — | Upgrade sqlite-docUpgrade thunderbirdUpgrade sqlite-debuginfoUpgrade rust-toolset-srpm-macrosUpgrade clippyUpgrade rust-docUpgrade rustfmtUpgrade cargoUpgrade rust-srcUpgrade thunderbird-debuginfoUpgrade rust-debugger-commonUpgrade rust-gdbUpgrade sqlite-develUpgrade rustUpgrade sqliteUpgrade rust-analyzerUpgrade sqlite-tclUpgrade lemonUpgrade rust-std-staticUpgrade rust-toolset | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade rust-debugsourceUpgrade nodejs22-debugsourceUpgrade rustfmtUpgrade rust-debuginfoUpgrade sqlite-libs-debuginfoUpgrade rust-gdbUpgrade lemon-debuginfoUpgrade nodejs22-libsUpgrade rust-toolsetUpgrade nodejs22Upgrade sqlite-analyzerUpgrade sqlite-debugsourceUpgrade sqlite-debuginfoUpgrade rust-lldbUpgrade nodejs22-docsUpgrade sqlite-docUpgrade rust-analyzer-debuginfoUpgrade rust-srcUpgrade rust-analyzerUpgrade rust-std-static-wasm32-wasip1Upgrade sqliteUpgrade cargoUpgrade nodejs22-npmUpgrade clippy-debuginfoUpgrade rust-docUpgrade clippyUpgrade sqlite-tclUpgrade sqlite-libsUpgrade nodejs22-debuginfoUpgrade lemonUpgrade sqlite-tcl-debuginfoUpgrade nodejs22-develUpgrade rust-toolset-srpm-macrosUpgrade nodejs22-full-i18nUpgrade sqlite-analyzer-debuginfoUpgrade rustfmt-debuginfoUpgrade sqlite-tools-debuginfoUpgrade nodejs22-libs-debuginfoUpgrade sqlite-develUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade cargo-debuginfoUpgrade rust-std-static-wasm32-unknown-unknownUpgrade v8-12.4-develUpgrade sqlite-toolsUpgrade rust | Aug 19, 2025 | Jul 15, 2025 |
| Apple Osx Sqlite | — | Upgrade macOS to the latest version | May 26, 2026 | May 26, 2026 |
| Debian | — | Upgrade sqlite3 | Jul 17, 2025 | Jul 15, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Freebsd | — | Upgrade sqlite3Upgrade linux_base-rl9Upgrade linux-rl9-sqlite3Upgrade linux-c7-sqlite | Jul 24, 2025 | Jul 23, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sqlite | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade sqlite | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade sqlite | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade sqlite | Oct 24, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sqlite | Jan 8, 2026 | Jan 7, 2026 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory4Apply the fix or workaround for python_advisory17 | Oct 7, 2025 | Oct 6, 2025 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.12 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2026 to the latest version in the current channel channel.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.11 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2017 to the latest version in the LTSC 15.9 version stream, or upgrade to a newer supported version of Visual Studio 2017.Update Microsoft Visual Studio 2022 to the latest version in the current channel channel. | May 26, 2026 | Aug 14, 2025 |
| Microsoft Windows | — | 2026-01 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5073457)2026-01 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5073450)2026-01 Cumulative Update for Microsoft Windows 10, version 1607 (KB5073722)2026-01 Cumulative Update for Microsoft Windows 11, version 25H2 (KB5074109)2026-01 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5073722)2026-01 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5073723)2026-01 Cumulative Update for Microsoft Windows 11, version 23H2 (KB5073455)2026-01 Cumulative Update for Microsoft Windows 10, version 21H2 (KB5073724)2026-01 Cumulative Update for Microsoft Windows 10, version 22H2 (KB5073724)2026-01 Cumulative Update for Microsoft Windows Server 2025, version 24H2 (KB5073379)2026-01 Cumulative Update for Microsoft Windows 11, version 24H2 (KB5074109)2026-01 Cumulative Update for Microsoft Windows 10, version 1809 (KB5073723)2026-01 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5073457) | Apr 14, 2026 | Apr 14, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.8 | Jan 21, 2026 | Jul 15, 2025 |
| Oracle_linux | — | Upgrade nodejs-nodemonUpgrade mingw32-sqlite-staticUpgrade sqlite-libsUpgrade mingw64-sqlite-staticUpgrade nodejs-packagingUpgrade lemonUpgrade sqlite-develUpgrade v8-12.4-develUpgrade sqlite-tclUpgrade nodejs-docsUpgrade mingw32-sqliteUpgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade sqliteUpgrade nodejs-libsUpgrade npmUpgrade nodejs-develUpgrade mingw64-sqliteUpgrade nodejs-full-i18nUpgrade sqlite-doc | Jul 29, 2025 | Jul 15, 2025 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Aug 10, 2026 | Jul 15, 2025 |
| Redhat_linux | — | Upgrade sqlite-debuginfoUpgrade nodejsUpgrade nodejs-full-i18nUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-tclUpgrade npmUpgrade sqlite-docUpgrade mingw64-sqlite-staticUpgrade lemon-debuginfoUpgrade lemonUpgrade mingw32-sqliteUpgrade nodejs-packaging-bundlerUpgrade mingw64-sqliteUpgrade nodejs-debuginfoUpgrade sqlite-libsUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade sqlite-debugsourceUpgrade nodejs-libs-debuginfoUpgrade nodejs-libsUpgrade nodejs-develUpgrade mingw32-sqlite-staticUpgrade nodejs-packagingUpgrade v8-12.4-develUpgrade mingw64-sqlite-debuginfoNo solution existsUpgrade mingw32-sqlite-debuginfoUpgrade sqlite-develUpgrade sqlite-libs-debuginfoUpgrade sqlite-tools-debuginfoUpgrade sqliteUpgrade nodejs-docsUpgrade sqlite-tcl-debuginfo | Jul 16, 2025 | Jul 15, 2025 |
| Rocky_linux | — | Upgrade sqlite-debugsourceUpgrade sqlite-libs-debuginfoUpgrade npmUpgrade sqlite-debuginfoUpgrade nodejs-develUpgrade sqlite-develUpgrade v8-12.4-develUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejs-debugsourceUpgrade nodejs-libs-debuginfoUpgrade lemon-debuginfoUpgrade sqlite-libsUpgrade lemonUpgrade sqliteUpgrade nodejsUpgrade nodejs-debuginfo | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade sqlite3-docUpgrade libsqlite3-0-x86-64-v3Upgrade libsqlite3-0Upgrade sqlite3-tclUpgrade sqlite3-develUpgrade sqlite3Upgrade libsqlite3-0-32bit | Aug 14, 2025 | Jul 31, 2025 |
| Ubuntu | — | Upgrade libsqlite3-0 (Ubuntu Pro)Upgrade libsqlite3-0 | Jul 29, 2025 | Jul 15, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jul 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub