一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月19日

CVE-2026-112052 [MEDIUM] – libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point an

未分类
📑 文章目录

libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads. Attackers can supply a crafted geometry BLOB with a large point count, for example in a SpatiaLite database file, to crash the process or corrupt heap memory on 32-bit builds.