{"id":"CVE-2026-119375","published":"2026-10-30T12:16:36.340","lastModified":"2026-10-30T18:41:13.287","description":"SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache memory by supplying a WAL file with an undersized page size. Attackers can craft a database and WAL file whose oversized record payload makes queries like substr() return stale bytes, disclosing other table rows and internal pointers.","cvssScore":5.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwes":["CWE-908"],"vendors":[],"products":[],"references":[{"url":"https://abraxaslabs.tech/research/sqlite-wal-pagesize","tags":[]},{"url":"https://github.com/sqlite/sqlite","tags":[]},{"url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/src/wal.c#L3672","tags":[]},{"url":"https://github.com/sqlite/sqlite/commit/e5bf119821f25be1d7f10ef0a2edbe175289166e","tags":[]},{"url":"https://sqlite.org/bugs/info/2026-08-17T15:54:41Z","tags":[]},{"url":"https://sqlite.org/releaselog/3_54_0.html","tags":[]},{"url":"https://sqlite.org/src/info/f9b4ee369557c36c","tags":[]},{"url":"https://www.vulncheck.com/advisories/sqlite-before-3.54.0-information-disclosure-via-wal-page-size-mismatch","tags":[]}],"exploitRefs":[{"url":"https://github.com/sqlite/sqlite","tags":[]},{"url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/src/wal.c#L3672","tags":[]},{"url":"https://github.com/sqlite/sqlite/commit/e5bf119821f25be1d7f10ef0a2edbe175289166e","tags":[]}],"hasPoc":true,"ai":null}