It was discovered that SQLite did not properly handle NULL pointer
dereferences in the Session Extension when applying a corrupt changeset.
An attacker could possibly use this issue to cause SQLite to crash,
resulting in a denial of service. (CVE-2026-50812)

It was discovered that SQLite had a buffer overread in the Session
Extension when...