open-source-dependency-vulnerabilityai-platform-securitywidely-deployed-product-advisory

Google AI Model Discovered New SQLite Memory Corruption Flaw

Vulnerability Disclosure · 2 sources · Updated 4mo ago · First seen Nov 8, 2024

Google Project Zero reported that its Big Sleep large language model identified a previously unknown vulnerability in SQLite, marking a real-world bug discovery during testing on widely used open-source software. The flaw affects SQLite 3.47.0 and was traced to the seriesBestIndex function, where improper handling of rowid-related parameters can allow an invalid negative iColumn value.

The bug causes a stack buffer underflow that can lead to out-of-bounds heap writes, creating conditions that may be exploitable for attacks. According to reporting cited by CSIRT.SK, the issue had not been caught by existing fuzzing tools, underscoring the significance of AI-assisted vulnerability research; defenders were advised to update SQLite to the latest available version.

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

2 events · Oct 2, 2024 – Nov 8, 2024

Nov 8, 20242y ago
CSIRT.SK warns that the SQLite flaw affects version 3.47.0
CSIRT.SK reported that the newly disclosed SQLite vulnerability affects SQLite 3.47.0 and said the issue had been missed by fuzzing tools. Its notice recommended updating to the latest SQLite version.
Zraniteľnosť v SQLite objavil model AI od Google | CSIRT.SK
Oct 2, 20242y ago
Google Project Zero publishes Big Sleep vulnerability discovery in SQLite
Google Project Zero published a report describing how its Big Sleep large language model found a previously undiscovered vulnerability in SQLite while testing real-world open-source software. The flaw was characterized as a stack buffer underflow that can lead to out-of-bounds heap writes.
From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Organizations

1 linked

Sqlite

Do you run this?See whether adversaries are exploiting this yet, and where the affected versions run in your environment.

Check Your Exposure

Source coverage

Sources

2 references tracked. Mallory keeps watching after this page renders.

Csirt SkNews · Nov 8, 2024

Zraniteľnosť v SQLite objavil model AI od Google | CSIRT.SKOpen source ↗

Google Project ZeroAdvisories · Oct 2, 2024

From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World CodeOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

Google AI Model Discovered New SQLite Memory Corruption Flaw

How this story unfolded

CSIRT.SK warns that the SQLite flaw affects version 3.47.0

Google Project Zero publishes Big Sleep vulnerability discovery in SQLite

Related entities

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Malicious SQLite Databases Can Trigger Code Execution via Query Hijacking

SQLite FTS5 Heap Buffer Overflow Patched in CVE-2026-11824

SQLite Session Flaw Lets Malicious Changesets Trigger Heap Out-of-Bounds Writes

Google AI Model Discovered New SQLite Memory Corruption Flaw

How this story unfolded

CSIRT.SK warns that the SQLite flaw affects version 3.47.0

Google Project Zero publishes Big Sleep vulnerability discovery in SQLite

Related entities

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Malicious SQLite Databases Can Trigger Code Execution via Query Hijacking

SQLite FTS5 Heap Buffer Overflow Patched in CVE-2026-11824

SQLite Session Flaw Lets Malicious Changesets Trigger Heap Out-of-Bounds Writes