AIKIDO-2026-53049
System.Data.SQLite is vulnerable to Numeric Truncation Error
72
High Risk
This Affects:
System.Data.SQLiteTL;DR
System.Data.SQLite 1.x bundles SQLite with versions before 3.50.2. These versions contain a vulnerability where the number of aggregate terms can exceed the number of available columns, potentially resulting in memory corruption.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
System.Data.SQLite is vulnerable to Numeric Truncation Error in versions 0.0.1 - 1.0.119.
How to fix this
Upgrade the System.Data.SQLite or System.Data.SQLite.Core library to the patch version. From version 2.x on this library does not bundle native SQLite anymore.
Links
system.data.sqlite.org/home/doc/tip/www/news.wikisqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8seclists.org/fulldisclosure/2025/Sep/49seclists.org/fulldisclosure/2025/Sep/53seclists.org/fulldisclosure/2025/Sep/56seclists.org/fulldisclosure/2025/Sep/57seclists.org/fulldisclosure/2025/Sep/58openwall.com/lists/oss-security/2025/09/06/1cert-portal.siemens.com/productcert/html/ssa-225816.htmlcert-portal.siemens.com/productcert/html/ssa-485750.html
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.