Debian/spatialite: unknown

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can s

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

osv: DEBIAN-CVE-2026-112048#Debian:14/spatialite
https://security-tracker.debian.org/tracker/CVE-2026-112048

published 2026-10-18T13:16:36.770Z · modified 2026-10-23T18:05:33.074447287Z · JSON