CVE-2026-112052

6.1 MEDIUM

Published 2026-10-18 · Updated 2026-10-18

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads. Attackers can supply a crafted geometry BLOB with a large point count, for example in a SpatiaLite database file, to crash the process or corrupt heap memory on 32-bit builds.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Weaknesses

CWE-190

All references

https://hackmd.io/@haindpwn/libspatialite-wkb-geometry-count-overflow
https://www.gaia-gis.it/fossil/libspatialite/file?name=src/gaiageo/gg_wkb.c&ci=5a5528e8d2
https://www.vulncheck.com/advisories/libspatialite-through-5.1.0-integer-overflow-in-wkb-geometry-parsing

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2025-14181PoC
UNSCOREDCVE-2025-58771
HIGHCVE-2026-100136
HIGHCVE-2026-100208
MEDIUMCVE-2026-101279
HIGHCVE-2026-101944
HIGHCVE-2026-101945
MEDIUMCVE-2026-101972

Related by shared AI tags and CWE weakness class. Browse the full archive.