libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads. This vulnerability can be triggered by supplying a crafted geometry BLOB with a large point count, such as in a SpatiaLite database file, which can cause the process to crash or corrupt heap memory on 32-bit build [truncated]
libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. This vulnerability affects systems or applications using libspatialite, potentially causing process crashes or heap memory corruption on 32-bit builds from crafted geometry inputs. Defenders and administrators should assess [truncated]
