{"id":"CVE-2020-15358","title":"In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.","summary":"In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-787"],"vendor":"sqlite","product":"sqlite","affected":["sqlite < 3.32.3","ubuntu_linux = 20.04","icloud < 7.21","ipados < 14.0","iphone_os < 14.0","macos < 11.0.1","tvos < 14.0","watchos < 7.0","communications_cloud_native_core_policy = 1.14.0","communications_messaging_server = 8.1","communications_network_charging_and_control = 6.0.1","communications_network_charging_and_control = 12.0.2","enterprise_manager_ops_center = 12.4.0.0","hyperion_infrastructure_technology = 11.1.2.4","mysql <= 8.0.22","outside_in_technology = 8.5.4","outside_in_technology = 8.5.5","sinec_infrastructure_network_services < 1.0.1.1"],"patched":["sqlite 3.32.3","icloud 7.21","ipados 14.0","iphone_os 14.0","macos 11.0.1","tvos 14.0","watchos 7.0","sinec_infrastructure_network_services 1.0.1.1"],"published":"2020-06-27","updated":"2026-10-14","sourceUpdated":"2026-10-14T10:17:30.063","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-15358","references":[{"url":"http://seclists.org/fulldisclosure/2020/Dec/32","label":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2020/Nov/19","label":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2020/Nov/20","label":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2020/Nov/22","label":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2021/Feb/14","label":"cve@mitre.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","label":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/202007-26","label":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20200709-0001/","label":"cve@mitre.org"},{"url":"https://support.apple.com/kb/HT211843","label":"cve@mitre.org"},{"url":"https://support.apple.com/kb/HT211844","label":"cve@mitre.org"},{"url":"https://support.apple.com/kb/HT211847","label":"cve@mitre.org"},{"url":"https://support.apple.com/kb/HT211850","label":"cve@mitre.org"},{"url":"https://support.apple.com/kb/HT211931","label":"cve@mitre.org"},{"url":"https://support.apple.com/kb/HT212147","label":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4438-1/","label":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","label":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","label":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","label":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","label":"cve@mitre.org"},{"url":"https://www.sqlite.org/src/info/10fa79d00f8091e5","label":"cve@mitre.org"},{"url":"https://www.sqlite.org/src/timeline?p=version-3.32.3&bt=version-3.32.2","label":"cve@mitre.org"},{"url":"https://www.sqlite.org/src/tktview?name=8f157e8010","label":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2020/Dec/32","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2020/Nov/19","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2020/Nov/20","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2020/Nov/22","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2021/Feb/14","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202007-26","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20200709-0001/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT211843","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT211844","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT211847","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT211850","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT211931","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT212147","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4438-1/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sqlite.org/src/info/10fa79d00f8091e5","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sqlite.org/src/timeline?p=version-3.32.3&bt=version-3.32.2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sqlite.org/src/tktview?name=8f157e8010","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-389290.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd"],"epss":0.01027,"epssPercentile":0.62678,"ingestedAt":"2026-10-14T10:25:41.177Z","slug":"CVE-2020-15358","body":"## Overview\n\nIn SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.\n\n## Affected\n\n- `sqlite < 3.32.3`\n- `ubuntu_linux = 20.04`\n- `icloud < 7.21`\n- `ipados < 14.0`\n- `iphone_os < 14.0`\n- `macos < 11.0.1`\n- `tvos < 14.0`\n- `watchos < 7.0`\n- `communications_cloud_native_core_policy = 1.14.0`\n- `communications_messaging_server = 8.1`\n- `communications_network_charging_and_control = 6.0.1`\n- `communications_network_charging_and_control = 12.0.2`\n- `enterprise_manager_ops_center = 12.4.0.0`\n- `hyperion_infrastructure_technology = 11.1.2.4`\n- `mysql <= 8.0.22`\n- `outside_in_technology = 8.5.4`\n- `outside_in_technology = 8.5.5`\n- `sinec_infrastructure_network_services < 1.0.1.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `sqlite 3.32.3`\n- `icloud 7.21`\n- `ipados 14.0`\n- `iphone_os 14.0`\n- `macos 11.0.1`\n- `tvos 14.0`\n- `watchos 7.0`\n- `sinec_infrastructure_network_services 1.0.1.1`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}