Approved changes feed: RSS · Atom

cpe:2.3:a:spatialite:libspatialite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSpatialite (0c9d8c1a-e653-5d94-969a-296da975d114)
ProductLibspatialite (a0bda5bd-ddb1-561f-9de8-fa6081264580)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-112052 vulnerable 2026-11-03 10:16:28.876070 libspatialite through 5.1.0 Integer Overflow in WKB Geometry Parsing
MEDIUM (6.1)
libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads. Attackers can supply a crafted geometry BLOB with a large point count, for example in a SpatiaLite database file, to crash the process or corrupt heap memory on 32-bit builds.
Published: 2026-10-18T12:19:43.850Z
Updated: 2026-10-19T18:01:10.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-112048 vulnerable 2026-11-03 10:16:28.076794 libspatialite through 5.1.0 Uncontrolled Memory Allocation via ParseWkbPolygon Ring Count
MEDIUM (6.1)
libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or ST_GeomFromWKB input to crash the process or corrupt heap memory on 32-bit builds.
Published: 2026-10-18T12:19:36.940Z
Updated: 2026-10-20T15:31:53.762Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.