A heap buffer overflow in the SQLite SQLAR extension (CVE-2026-39113) occurs when an attacker triggers sqlar_uncompress with a 64-bit size value that gets truncated during memory allocation, leading to heap corruption and potential denial of service.
SQLite +1
sqlar
heap-buffer-overflow
denial-of-service
1t
1c
updated