SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-39113

MEDIUM · CVSS 4 EPSS 0.21% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-25 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

A buffer overflow vulnerability in SQLite affects specific source snapshots and builds that include a certain Fossil check-in, allowing attackers to exploit components like sqlarUncompressFunc() and sqlite3_malloc() to trigger a denial of service. Organizations using affected versions of SQLite should prioritize patching or upgrading to mitigate potential service disruptions. This is especially critical for environments where SQLite is integral to application functionality or data management.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-39113
Severity
MEDIUM
CVSS
4
EPSS
0.21%

Original NVD Description

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an attacker to cause a denial of service via the ext/misc/sqlar.c, sqlarUncompressFunc(), sqlar_uncompress(), sqlite3_value_int64(), sqlite3_malloc(int), uncompress() components