CVE-20XX-?

Sqlite CVEs.

Published CVEs affecting Sqlite, ranked by exploit odds.

2 CVEs · updated 2026-11-06 10:55 UTC

Reset all
  1. CVE-2025-70873

    An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

    Disclosure Sqlite

    7.5 HIGH 0.5% exploit odds Fix listed
  2. CVE-2026-119375

    SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache memory by supplying a WAL file with an undersized page size. Attackers can craft a database and WAL file whose oversized record payload makes queries like substr() return stale bytes, disclosing other table rows and internal pointers.

    Disclosure Server Sqlite

    6.8 MEDIUM 0.2% exploit odds Fix listed

All CVEs affecting Sqlite that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.