CVE-2026-39113

CVE-2026-39113 describes a heap buffer overflow vulnerability found within the optional SQLAR extension of SQLite. This flaw specifically resides in the `sqlar_uncompress()` function. The vulnerability can lead to a process crash due to an oversized write operation involving zlib. An attacker could exploit this issue in applications that have loaded the SQLAR extension, provided they can invoke the vulnerable function.