Skip to content
fr Sign in
6.8 Medium

CVE-2026-119591 SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause

Description

SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TK_PLUS expressions whose recursive freeing in sqlite3ExprDeleteNN() exhausts the C stack, causing denial of service.

CVSS 4.0 detail

Vector CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Exploitable with local access to the machine, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Local
Attack complexity
Low
Attack requirements
None
Privileges required
None
Interaction
Passive
Confidentiality
None
Integrity
None
Availability
High
Confidentiality of other systems
None
Integrity of other systems
None
Availability of other systems
None

Affected products and versions

Product Affected versions Fixed in
SQLite 3.54 earliest → < 3.54.0 3.54.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SQLite

The 18 CVEs of SQLite →
CVE-2026-119586 SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits… 8.5 High CVE-2026-119379 SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in… 8.5 High CVE-2026-119378 SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make… 6.8 Medium CVE-2026-119377 SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING 2.0 Low
Track this CVE