Vulnerability · Published Oct 18, 2026 · Assigned by VulnCheck
CVE-2026-112052libspatialite through 5.1.0 Integer Overflow in WKB Geometry Parsing
Medium 6.1
In plain English
A medium-severity integer overflow in libspatialite from SpatiaLite. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)0.2%top 92.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads. Attackers can supply a crafted geometry BLOB with a large point count, for example in a SpatiaLite database file, to crash the process or corrupt heap memory on 32-bit builds.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | spatialite | no fix listed | DEBIAN-CVE-2026-112052 |
| Debian:13 | spatialite | no fix listed | DEBIAN-CVE-2026-112052 |
| Debian:14 | spatialite | no fix listed | DEBIAN-CVE-2026-112052 |
| Ubuntu:22.04:LTS | spatialite | no fix listed | UBUNTU-CVE-2026-112052 |
| Ubuntu:24.04:LTS | spatialite | no fix listed | UBUNTU-CVE-2026-112052 |
| Ubuntu:26.04:LTS | spatialite | no fix listed | UBUNTU-CVE-2026-112052 |
| Ubuntu:26.10 | spatialite | no fix listed | UBUNTU-CVE-2026-112052 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SpatiaLite | libspatialite | 0 – through 5.1.0 |
Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
References
- https://hackmd.io/@haindpwn/libspatialite-wkb-geometry-count-overflow third-party-advisory
- https://www.gaia-gis.it/fossil/libspatialite/file?name=src/gaiageo/gg_wkb.c&ci=5a5528e8d2 technical-description
- VulnCheck Advisory: libspatialite through 5.1.0 Integer Overflow in WKB Geometry Parsing third-party-advisory
- https://hackmd.io/@haindpwn/cve-2026-112048-112052-libspatialite-wkb-geometry-count-overflow exploit