There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Fix
Public exploits 1
- SQLite 3.50.1 - Heap Overflow (local · windows) Exploit-DB · 2026-04-08
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
Patch, vendor advisory and mitigation references on NVD 1
- https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8 Patch
Vendor advisories in the News 1
- Siemens RUGGEDCOM CROSSBOW Station Access Controller CISA ICS Advisories · 2026-10-22
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
In the news 1
Change history 1
- First seenCVSS 7.2 · sqlite, apple, siemensNVD modified 2026-10-15 02:18
Affected (CPE criteria) 9
cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:*cpe:2.3:a:siemens:sidis_prime:*:*:*:*:*:*:*:*
References 10
- https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8 Patch
- http://seclists.org/fulldisclosure/2025/Sep/49 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/53 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/56 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/57 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/58 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2025/09/06/1 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-225816.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-485750.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-765416.html