Read the docs

SpatiaLite

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

SpatiaLite records in CISA KEV

No SpatiaLite vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-76180 CVE-2026-112052 · GHSA-8jmj-j7pf-v8j3

Integer overflow in libspatialite WKB geometry parsing

Priority MEDIUM 64

libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00182 Published 2026-10-18 Fix deferred CWE-190
TI-2026-76176 CVE-2026-112048 · GHSA-w35v-6xgp-6m6w

Uncontrolled memory allocation in libspatialite polygon parsing

Priority MEDIUM 64

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.0018 Published 2026-10-18 Fix deferred CWE-789
Open these records in search →