CVE-2026-39113

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-39113

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-39113.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-39113

Downstream

DEBIAN-CVE-2026-39113

ECHO-ba17-0503-20ce

Published

2026-08-25T00:00:00Z

Modified

2026-08-27T19:14:09.964716Z

Summary

[none]

Details

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an attacker to cause a denial of service via the ext/misc/sqlar.c, sqlarUncompressFunc(), sqlaruncompress(), sqlite3valueint64(), sqlite3malloc(int), uncompress() components

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39113.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/sqlite/sqlite

Affected ranges

Type

GIT

Repo

https://github.com/sqlite/sqlite

Events

Introduced

Fixed

169f68ed88b34cb68f720191c64c058f2ccec508

Database specific

Show details

{
    "source": "REFERENCES"
}

Affected versions

Other

artiphishell

major-relase

relase

same-as-3.*

same-as-3.35.3

version-1.*

version-1.0

version-1.0.1

version-1.0.10

version-1.0.12

version-1.0.13

version-1.0.14

version-1.0.15

version-1.0.16

version-1.0.17

version-1.0.18

version-1.0.19

version-1.0.20

version-1.0.21

version-1.0.22

version-1.0.23

version-1.0.24

version-1.0.25

version-1.0.26

version-1.0.27

version-1.0.28

version-1.0.29

version-1.0.3

version-1.0.30

version-1.0.31

version-1.0.32

version-1.0.4

version-1.0.5

version-1.0.8

version-1.0.9

version-2.*

version-2.0.0

version-2.0.1

version-2.0.2

version-2.0.3

version-2.0.4

version-2.0.5

version-2.0.6

version-2.0.7

version-2.0.8

version-2.1.0

version-2.1.1

version-2.1.2

version-2.1.3

version-2.1.4

version-2.1.5

version-2.1.6

version-2.1.7

version-2.2.0

version-2.2.1

version-2.2.2

version-2.2.3

version-2.2.4

version-2.2.5

version-2.3.0

version-2.3.1

version-2.3.2

version-2.3.3

version-2.4.0

version-2.4.1

version-2.4.10

version-2.4.11

version-2.4.12

version-2.4.2

version-2.4.3

version-2.4.4

version-2.4.5

version-2.4.6

version-2.4.7

version-2.4.8

version-2.4.9

version-2.5.0

version-2.5.1

version-2.5.2

version-2.5.3

version-2.5.4

version-2.5.5

version-2.5.6

version-2.6.0

version-2.6.1

version-2.6.2

version-2.6.3

version-2.7.0

version-2.7.1

version-2.7.2

version-2.7.3

version-2.7.4

version-2.7.5

version-2.7.6

version-2.8.0

version-2.8.1

version-2.8.10

version-2.8.11

version-2.8.12

version-2.8.13

version-2.8.2

version-2.8.3

version-2.8.4

version-2.8.5

version-2.8.6

version-2.8.7

version-2.8.8

version-2.8.9

version-3.*

version-3.0.0

version-3.0.1

version-3.0.2

version-3.0.3

version-3.0.4

version-3.0.5

version-3.0.6

version-3.0.7

version-3.0.8

version-3.1.0

version-3.1.1

version-3.1.2

version-3.1.3

version-3.1.3.1

version-3.1.4

version-3.1.5

version-3.1.6

version-3.10.0

version-3.11.0

version-3.12.0

version-3.13.0

version-3.14.0

version-3.15.0

version-3.16.0

version-3.2.0

version-3.2.1

version-3.2.2

version-3.2.3

version-3.2.4

version-3.2.5

version-3.2.6

version-3.2.7

version-3.22.0

version-3.23.0

version-3.23.1

version-3.24.0

version-3.25.0

version-3.26.0

version-3.27.0

version-3.28.0

version-3.29.0

version-3.3.0

version-3.3.1

version-3.3.10

version-3.3.11

version-3.3.12

version-3.3.13

version-3.3.14

version-3.3.15

version-3.3.16

version-3.3.17

version-3.3.2

version-3.3.3

version-3.3.4

version-3.3.5

version-3.3.6

version-3.3.7

version-3.3.8

version-3.3.9

version-3.30.0

version-3.31.0

version-3.31.1

version-3.32.0

version-3.32.1

version-3.33.0

version-3.34.0

version-3.35.0

version-3.35.1

version-3.35.2

version-3.36.0

version-3.37.0

version-3.38.0

version-3.39.0

version-3.4.0

version-3.4.1

version-3.4.2

version-3.40.0

version-3.41.0

version-3.42.0

version-3.43.0

version-3.44.0

version-3.45.0

version-3.46.0

version-3.47.0

version-3.48.0

version-3.49.0

version-3.5.0

version-3.5.1

version-3.5.2

version-3.5.3

version-3.5.4

version-3.5.5

version-3.5.6

version-3.5.7

version-3.5.8

version-3.5.9

version-3.50.0

version-3.51.0

version-3.52.0

version-3.6.0

version-3.6.1

version-3.6.10

version-3.6.11

version-3.6.12

version-3.6.13

version-3.6.14

version-3.6.15

version-3.6.16

version-3.6.17

version-3.6.18

version-3.6.19

version-3.6.2

version-3.6.20

version-3.6.21

version-3.6.22

version-3.6.23

version-3.6.3

version-3.6.4

version-3.6.5

version-3.6.6

version-3.6.7

version-3.6.8

version-3.6.9

version-3.7.0

version-3.7.1

version-3.7.10

version-3.7.11

version-3.7.12

version-3.7.12.1

version-3.7.13

version-3.7.14

version-3.7.15

version-3.7.16

version-3.7.16.1

version-3.7.17

version-3.7.2

version-3.7.3

version-3.7.4

version-3.7.5

version-3.7.6

version-3.7.6.1

version-3.7.7

version-3.7.8

version-3.7.9

version-3.8.0

version-3.8.1

version-3.8.10

version-3.8.10.1

version-3.8.11

version-3.8.11.1

version-3.8.2

version-3.8.3

version-3.8.4

version-3.8.4.1

version-3.8.5

version-3.8.6

version-3.8.7

version-3.8.8

version-3.8.9

version-3.9.0

Database specific

vanir_signatures

[
    {
        "id": "CVE-2026-39113-531777ea",
        "target": {
            "file": "src/btree.c"
        },
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "70446409330231105630817689568687018938",
                "338906070429696790328088559243218733209",
                "255039354024633570035412844728542128564",
                "95807499626319381507986151421634668296",
                "300076277947233735737192518808595462489",
                "323839119980907498800290193789273744406",
                "99444959544205514057622809684528590749",
                "180555414129757407767537164972317733340",
                "289661608673300533498366352938162729282",
                "310704964454642143339741340863407273820",
                "256477658491084357048132423930609942323",
                "66327148346417501552611537928305664344",
                "214533049578149424180611220920267072513",
                "6340545679213454599365364426266647806",
                "47576465790459269984424743983710152288",
                "112265664825054872672980918515713743606"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/sqlite/sqlite/commit/169f68ed88b34cb68f720191c64c058f2ccec508",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2026-39113-5dae3be3",
        "target": {
            "file": "ext/misc/sqlar.c"
        },
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "186308204391328178205455952600612171166",
                "333116856949043857163447439002107089915",
                "306872792261211558871987797263345673910",
                "156711292062885821676058205943622143741"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/sqlite/sqlite/commit/169f68ed88b34cb68f720191c64c058f2ccec508",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2026-39113-94793250",
        "target": {
            "file": "src/json.c"
        },
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "245340927660686962636599166810421957218",
                "299576465675806713868041488725485073758",
                "95788352312924315563398396779279528790",
                "232531396685824234138573054246956627875",
                "62783679667153149563230755044255285032",
                "331834455327748000833370789679489220064",
                "284432948561962889678815822853373834831",
                "75063160214412479144823946790340233073",
                "43978437521099903195400238280726206239",
                "331834455327748000833370789679489220064",
                "284432948561962889678815822853373834831",
                "8758012732373156881421587231759496269",
                "299457937081955598215910202536370444327",
                "146345745351453325017492615837168303708",
                "327856923148591433402808128417772206243",
                "136989473060797992817304410991808756444"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/sqlite/sqlite/commit/169f68ed88b34cb68f720191c64c058f2ccec508",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2026-39113-b6542f3c",
        "target": {
            "function": "btreeParseCellPtr",
            "file": "src/btree.c"
        },
        "deprecated": false,
        "digest": {
            "function_hash": "246909833509192720337295822396436519122",
            "length": 1626.0
        },
        "signature_version": "v1",
        "source": "https://github.com/sqlite/sqlite/commit/169f68ed88b34cb68f720191c64c058f2ccec508",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2026-39113-c6a76bd5",
        "target": {
            "function": "jsonBlobEdit",
            "file": "src/json.c"
        },
        "deprecated": false,
        "digest": {
            "function_hash": "73553111718916123162515930080493152692",
            "length": 695.0
        },
        "signature_version": "v1",
        "source": "https://github.com/sqlite/sqlite/commit/169f68ed88b34cb68f720191c64c058f2ccec508",
        "signature_type": "Function"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-39113.json"

vanir_signatures_modified

"2026-08-27T19:14:09Z"