MEDIUM 6.9 NVD
CVE-2026-112048
libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via
libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or ST_GeomFromWKB input to crash the process or corrupt heap memory on 32-bit builds.
References
- https://hackmd.io/@haindpwn/libspatialite-wkb-geometry-count-overflow
- https://www.gaia-gis.it/fossil/libspatialite/file?name=src/gaiageo/gg_wkb.c&ci=5a5528e8d2
- https://www.vulncheck.com/advisories/libspatialite-through-5.1.0-uncontrolled-memory-alloc
This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-10-18 via NVD.
vulnfeed aggregates 16809 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.