SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache memory by supplying a WAL file with an undersized page size. Attackers can craft a database and WAL file whose oversized record payload makes queries like substr() return stale bytes, disclosing other table rows and internal pointers.

Etkilenen sürümler1 yazılım

Kaynaklar10 kaynak

• CVE.org kaydı
• NVD kaydı
• sqlite.org/src/info/f9b4ee369557c36c Yama
• github.com/…ommit/e5bf119821f25be1d7f10ef0a2edbe175289166e Yama
• sqlite.org/bugs/info/2026-08-17T15:54:41Z Üçüncü taraf
• abraxaslabs.tech/research/sqlite-wal-pagesize Üçüncü taraf
• vulncheck.com/…ormation-disclosure-via-wal-page-size-mismatch Üçüncü taraf
• github.com/sqlite/sqlite/blob/version-3.53.4/src/wal.c Diğer
• sqlite.org/releaselog/3_54_0.html Diğer
• github.com/sqlite/sqlite Diğer

Kayıt geçmişi

1. 30 Eki 2026 14:30Yayımlandı

İlgili açıklar

• 7,8 CVE-2026-119586SQLite CLI through 3.54.1 Command Injection via .recover Output
• 5,5 CVE-2026-119591SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause
• 7,8 CVE-2026-119379SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()
• 5,5 CVE-2026-119378SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()
• 5,5 CVE-2026-119376SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain
• 2,5 CVE-2026-119377SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING