Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: SpatiaLite Clear all filters
TI-2026-76180 CVE-2026-112052 · GHSA-8jmj-j7pf-v8j3

Integer overflow in libspatialite WKB geometry parsing

Priority MEDIUM 64

libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00182 Published 2026-10-18 Fix deferred CWE-190
TI-2026-76176 CVE-2026-112048 · GHSA-w35v-6xgp-6m6w

Uncontrolled memory allocation in libspatialite polygon parsing

Priority MEDIUM 64

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.0018 Published 2026-10-18 Fix deferred CWE-789