--- id: CVE-2020-15358 title: >- In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation. summary: >- In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation. severity: medium cvss: 5.5 cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H' cwe: - CWE-787 vendor: sqlite product: sqlite affected: - sqlite < 3.32.3 - ubuntu_linux = 20.04 - icloud < 7.21 - ipados < 14.0 - iphone_os < 14.0 - macos < 11.0.1 - tvos < 14.0 - watchos < 7.0 - communications_cloud_native_core_policy = 1.14.0 - communications_messaging_server = 8.1 - communications_network_charging_and_control = 6.0.1 - communications_network_charging_and_control = 12.0.2 - enterprise_manager_ops_center = 12.4.0.0 - hyperion_infrastructure_technology = 11.1.2.4 - mysql <= 8.0.22 - outside_in_technology = 8.5.4 - outside_in_technology = 8.5.5 - sinec_infrastructure_network_services < 1.0.1.1 patched: - sqlite 3.32.3 - icloud 7.21 - ipados 14.0 - iphone_os 14.0 - macos 11.0.1 - tvos 14.0 - watchos 7.0 - sinec_infrastructure_network_services 1.0.1.1 published: '2020-06-27' updated: '2026-10-14' sourceUpdated: '2026-10-14T10:17:30.063' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2020-15358' references: - url: 'http://seclists.org/fulldisclosure/2020/Dec/32' label: cve@mitre.org - url: 'http://seclists.org/fulldisclosure/2020/Nov/19' label: cve@mitre.org - url: 'http://seclists.org/fulldisclosure/2020/Nov/20' label: cve@mitre.org - url: 'http://seclists.org/fulldisclosure/2020/Nov/22' label: cve@mitre.org - url: 'http://seclists.org/fulldisclosure/2021/Feb/14' label: cve@mitre.org - url: 'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf' label: cve@mitre.org - url: 'https://security.gentoo.org/glsa/202007-26' label: cve@mitre.org - url: 'https://security.netapp.com/advisory/ntap-20200709-0001/' label: cve@mitre.org - url: 'https://support.apple.com/kb/HT211843' label: cve@mitre.org - url: 'https://support.apple.com/kb/HT211844' label: cve@mitre.org - url: 'https://support.apple.com/kb/HT211847' label: cve@mitre.org - url: 'https://support.apple.com/kb/HT211850' label: cve@mitre.org - url: 'https://support.apple.com/kb/HT211931' label: cve@mitre.org - url: 'https://support.apple.com/kb/HT212147' label: cve@mitre.org - url: 'https://usn.ubuntu.com/4438-1/' label: cve@mitre.org - url: 'https://www.oracle.com/security-alerts/cpuApr2021.html' label: cve@mitre.org - url: 'https://www.oracle.com/security-alerts/cpuapr2022.html' label: cve@mitre.org - url: 'https://www.oracle.com/security-alerts/cpujan2021.html' label: cve@mitre.org - url: 'https://www.oracle.com/security-alerts/cpuoct2020.html' label: cve@mitre.org - url: 'https://www.sqlite.org/src/info/10fa79d00f8091e5' label: cve@mitre.org - url: 'https://www.sqlite.org/src/timeline?p=version-3.32.3&bt=version-3.32.2' label: cve@mitre.org - url: 'https://www.sqlite.org/src/tktview?name=8f157e8010' label: cve@mitre.org - url: 'http://seclists.org/fulldisclosure/2020/Dec/32' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://seclists.org/fulldisclosure/2020/Nov/19' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://seclists.org/fulldisclosure/2020/Nov/20' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://seclists.org/fulldisclosure/2020/Nov/22' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://seclists.org/fulldisclosure/2021/Feb/14' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.gentoo.org/glsa/202007-26' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.netapp.com/advisory/ntap-20200709-0001/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://support.apple.com/kb/HT211843' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://support.apple.com/kb/HT211844' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://support.apple.com/kb/HT211847' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://support.apple.com/kb/HT211850' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://support.apple.com/kb/HT211931' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://support.apple.com/kb/HT212147' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://usn.ubuntu.com/4438-1/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.oracle.com/security-alerts/cpuApr2021.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.oracle.com/security-alerts/cpuapr2022.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.oracle.com/security-alerts/cpujan2021.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.oracle.com/security-alerts/cpuoct2020.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.sqlite.org/src/info/10fa79d00f8091e5' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.sqlite.org/src/timeline?p=version-3.32.3&bt=version-3.32.2' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.sqlite.org/src/tktview?name=8f157e8010' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://cert-portal.siemens.com/productcert/html/ssa-389290.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e tags: - nvd epss: 0.01027 epssPercentile: 0.62678 ingestedAt: '2026-10-14T10:25:41.177Z' --- ## Overview In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation. ## Affected - `sqlite < 3.32.3` - `ubuntu_linux = 20.04` - `icloud < 7.21` - `ipados < 14.0` - `iphone_os < 14.0` - `macos < 11.0.1` - `tvos < 14.0` - `watchos < 7.0` - `communications_cloud_native_core_policy = 1.14.0` - `communications_messaging_server = 8.1` - `communications_network_charging_and_control = 6.0.1` - `communications_network_charging_and_control = 12.0.2` - `enterprise_manager_ops_center = 12.4.0.0` - `hyperion_infrastructure_technology = 11.1.2.4` - `mysql <= 8.0.22` - `outside_in_technology = 8.5.4` - `outside_in_technology = 8.5.5` - `sinec_infrastructure_network_services < 1.0.1.1` ## Remediation Upgrade past the affected range: - `sqlite 3.32.3` - `icloud 7.21` - `ipados 14.0` - `iphone_os 14.0` - `macos 11.0.1` - `tvos 14.0` - `watchos 7.0` - `sinec_infrastructure_network_services 1.0.1.1`