CVE-2026-119376

MediumCVSS 5.5/10Last modified Nov 4, 2026

Description

SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH limit by chaining COLLATE postfix operators. Attackers can supply roughly 175,000 chained COLLATE operators in SQL or an untrusted database view to trigger unbounded recursion in sqlite3WalkExprNN() and crash the process.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-674

Affected software

VendorProductVersions
SQLiteSQLite< 3.54.0

References

Timeline

Published
Oct 30, 2026
Last modified
Nov 4, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-1193773.3SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined taCVE-2026-1193785.5SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heCVE-2026-1193797.8SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows CVE-2026-1193827.8Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.CVE-2026-1193836.6Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.CVE-2026-1193854.7Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attackerCVE-2026-1193867.0Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.CVE-2026-1193877.0Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.CVE-2026-1193887.0Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.CVE-2026-1193897.0Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.CVE-2026-119395.3IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to audit log forgery.CVE-2026-1193907.8Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code locally.
CVE-2026-119376: Medium severity, CVSS 5.5 | Vulnix