p PatchFirst

CVE-2026-112048

CVE-2026-112048 · libspatialite through 5.1.0 Uncontrolled Memory Allocation via ParseWkbPolygon Ring Count

This page contains facts from public vulnerability sources. Check the original advisory before updating.

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or ST_GeomFromWKB input to crash the process or corrupt heap memory on 32-bit builds.

CVSS 6.9 · Medium · EPSS 0.2%

Published
Updated

Stack: system

Affected products and versions

  • libspatialite

    Versions
    • ≥ 0, ≤ 5.1.0: Affected (custom)

    No fix published

  • spatialite Debian:12

    Versions
    • 5.0.1-3
    • 5.1.0-1
    • 5.1.0-1.1~exp1
    • 5.1.0-1~exp1
    • 5.1.0-2
    • 5.1.0-2~exp1
    • 5.1.0-3
    • 5.1.0-4
    • 5.1.0~rc0-1~exp1
    • 5.1.0~rc1-1~exp1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Debian:13

    Versions
    • 5.1.0-3
    • 5.1.0-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Debian:14

    Versions
    • 5.1.0-3
    • 5.1.0-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:14.04:LTS

    Versions
    • 3.1.0~rc2-2
    • 3.1.0~rc2-2ubuntu1
    • 4.1.1-5ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:16.04:LTS

    Versions
    • 4.3.0-3
    • 4.3.0a-1
    • 4.3.0a-2
    • 4.3.0a-3
    • 4.3.0a-4
    • 4.3.0a-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:18.04:LTS

    Versions
    • 4.3.0a-5build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:20.04:LTS

    Versions
    • 4.3.0a-6
    • 4.3.0a-6build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:22.04:LTS

    Versions
    • 5.0.1-2build1
    • 5.0.1-2build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:24.04:LTS

    Versions
    • 5.1.0-1
    • 5.1.0-3
    • 5.1.0-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:26.10

    Versions
    • 5.1.0-3ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:26.04:LTS

    Versions
    • 5.1.0-3ubuntu1
    • 5.1.0-3ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →