An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NSqlite
APPSqlite< 3.51.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2022-31631CRITICAL9.1PL ✓ten sam produkt
PHP PDO SQLite — błędne cytowanie ciągów prowadzące do SQL injection
CVE-2020-35527CRITICAL9.8ten sam produkt
In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FR...
CVE-2020-11656CRITICAL9.8ten sam produkt
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY ...
CVE-2019-19646CRITICAL9.8ten sam produkt
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of...
CVE-2019-19317CRITICAL9.8ten sam produkt
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column...