Libspatialite
Approved changes feed: RSS · Atom
cpe:2.3:a:spatialite:libspatialite:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Spatialite (0c9d8c1a-e653-5d94-969a-296da975d114) |
|---|---|
| Product | Libspatialite (a0bda5bd-ddb1-561f-9de8-fa6081264580) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-112052 |
vulnerable | 2026-11-03 10:16:28.876070 |
libspatialite through 5.1.0 Integer Overflow in WKB Geometry Parsing
MEDIUM (6.1)
libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads. Attackers can supply a crafted geometry BLOB with a large point count, for example in a SpatiaLite database file, to crash the process or corrupt heap memory on 32-bit builds.
Published: 2026-10-18T12:19:43.850Z
Updated: 2026-10-19T18:01:10.776Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-112048 |
vulnerable | 2026-11-03 10:16:28.076794 |
libspatialite through 5.1.0 Uncontrolled Memory Allocation via ParseWkbPolygon Ring Count
MEDIUM (6.1)
libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or ST_GeomFromWKB input to crash the process or corrupt heap memory on 32-bit builds.
Published: 2026-10-18T12:19:36.940Z
Updated: 2026-10-20T15:31:53.762Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.