CVE-2020-13434Medium· 5.5▾ SunlitSQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.0%
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
sqlite <= 3.32.0debian_linux = 8.0debian_linux = 9.0fedora = 32ubuntu_linux = 16.04ubuntu_linux = 18.04ubuntu_linux = 19.10ubuntu_linux = 20.04freebsd >= 11.0, < 11.4freebsd = 11.4freebsd = 12.0freebsd = 12.1communications_cloud_native_core_policy = 1.14.0communications_network_charging_and_control >= 12.0.0, <= 12.0.3communications_network_charging_and_control = 6.0.1outside_in_technology = 8.5.5icloud < 11.5itunes < 12.10.9ipados < 14.0iphone_os < 14.0macos >= 11.0, < 11.0.1tvos < 14.0watchos < 7.0Upgrade past the affected range:
freebsd 11.4icloud 11.5itunes 12.10.9ipados 14.0iphone_os 14.0macos 11.0.1tvos 14.0watchos 7.0Connected by shared product, vendor, weakness, or advisory.
CVE-2021-20227Medium· 5.5A flaw was found in SQLite's SELECT query functionality (src/select.c)
CVE-2020-13871High· 7.5SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
CVE-2020-15358Medium· 5.5In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
CVE-2020-13435Medium· 5.5SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
CVE-2020-11656Critical· 9.8In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
CVE-2020-11655High· 7.5SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.