p PatchFirst

CVE-2026-112052

CVE-2026-112052 · libspatialite through 5.1.0 Integer Overflow in WKB Geometry Parsing

This page contains facts from public vulnerability sources. Check the original advisory before updating.

libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads. Attackers can supply a crafted geometry BLOB with a large point count, for example in a SpatiaLite database file, to crash the process or corrupt heap memory on 32-bit builds.

CVSS 6.9 · Medium · EPSS 0.1%

Published
Updated

Stack: system

Affected products and versions

  • libspatialite

    Versions
    • ≥ 0, ≤ 5.1.0: Affected (custom)

    No fix published

  • spatialite Debian:12

    Versions
    • 5.0.1-3
    • 5.1.0-1
    • 5.1.0-1.1~exp1
    • 5.1.0-1~exp1
    • 5.1.0-2
    • 5.1.0-2~exp1
    • 5.1.0-3
    • 5.1.0-4
    • 5.1.0~rc0-1~exp1
    • 5.1.0~rc1-1~exp1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Debian:13

    Versions
    • 5.1.0-3
    • 5.1.0-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Debian:14

    Versions
    • 5.1.0-3
    • 5.1.0-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:14.04:LTS

    Versions
    • 3.1.0~rc2-2
    • 3.1.0~rc2-2ubuntu1
    • 4.1.1-5ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:16.04:LTS

    Versions
    • 4.3.0-3
    • 4.3.0a-1
    • 4.3.0a-2
    • 4.3.0a-3
    • 4.3.0a-4
    • 4.3.0a-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:18.04:LTS

    Versions
    • 4.3.0a-5build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:20.04:LTS

    Versions
    • 4.3.0a-6
    • 4.3.0a-6build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:22.04:LTS

    Versions
    • 5.0.1-2build1
    • 5.0.1-2build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:24.04:LTS

    Versions
    • 5.1.0-1
    • 5.1.0-3
    • 5.1.0-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:26.10

    Versions
    • 5.1.0-3ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • spatialite Ubuntu:26.04:LTS

    Versions
    • 5.1.0-3ubuntu1
    • 5.1.0-3ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →