Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-50812 →
DEBIAN-CVE-2026-50812
A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacke...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can supply a malformed changeset blob to cause a denial of service. The issue occurs when sqlite3changeset_apply_v3() applies a corrupt changeset and reaches sqlite3_value_type() with a NULL sqlite3_value pointer.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
sqlite3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
sqlite3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
sqlite3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.53.2-1"}]}]
Références
- advisory security-tracker.debian.org