https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 16:18:25 +0000 https://cve.radiocsirt.org/vuln/cve-2025-29087 <p><strong>Affected:</strong> SQLite</p> <p>In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer overflow occurs in calculating the size of the result buffer, and thus malloc may not allocate enough memory.</p> <p><strong>Affected:</strong> SQLite</p> <p>In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer overflow occurs in calculating the size of the result buffer, and thus malloc may not allocate enough memory.</p> https://cve.radiocsirt.org/vuln/cve-2025-29087 https://cve.radiocsirt.org/vuln/usn-7528-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: sqlite3, Ubuntu:22.04:LTS: sqlite3, Ubuntu:24.04:LTS: sqlite3</p> <p>It was discovered that SQLite incorrectly handled the concat_ws() function. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2025-29087, CVE-2025-3277)</p> <p>It was discovered that SQLite incorrectly handled certain argument values to sqlite3_db_config(). An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-29088)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: sqlite3, Ubuntu:22.04:LTS: sqlite3, Ubuntu:24.04:LTS: sqlite3</p> <p>It was discovered that SQLite incorrectly handled the concat_ws() function. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2025-29087, CVE-2025-3277)</p> <p>It was discovered that SQLite incorrectly handled certain argument values to sqlite3_db_config(). An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-29088)</p> https://cve.radiocsirt.org/vuln/usn-7528-1