Skip to main content
VulnerabilityPublished Updated

Osquery: Heap-buffer-overflow

Affects osquerySource GCVE Database

0
Severity
High

Rated High by Threat Radar's AI analysis

Data as of 29 Oct 2026, 14:55 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzosquerypkg:generic/osqueryOther threatsAffected
  • 5.5.1 – 5.38.0
  • >=877d5e69ab97e15800b5c5128b3de2cf6f322942
36 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should monitor official osquery advisories and OSS-Fuzz updates for any released fixes. Until a fix is available, cautious use or disabling of affected versions may be considered.

Description

A heap-buffer-overflow vulnerability was identified in osquery during execution of sqlite3VdbeExec, as reported by OSS-Fuzz. The issue causes a read overflow on the heap, potentially leading to memory corruption or crashes. Multiple specific versions of osquery are affected.

References

Community reviews

Loading reviews…