A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can supply a malformed changeset blob to cause a denial of service. The issue occurs when sqlite3changeset_apply_v3() applies a corrupt changeset and reaches sqlite3_value_type() with a NULL sqlite3_value pointer.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade nodejs22-docsUpgrade nodejs22Upgrade nodejs22-full-i18nUpgrade nodejs22-libs-debuginfoUpgrade nodejs22-debuginfoUpgrade v8-12.4-develUpgrade nodejs22-libsUpgrade nodejs22-develUpgrade nodejs22-npmUpgrade nodejs22-debugsource | Aug 18, 2026 | Jul 8, 2026 |
| Redhat_linux | — | No solution exists | Aug 27, 2026 | Jul 8, 2026 |
| Ubuntu | — | Upgrade sqlite3 | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub