SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| SQLite | SQLite | unaffected |
|
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Sqlite | Sqlite |
|
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.147% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-825 | |
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet() caused by dangling cached position-list pointers. Attackers can run a full-text MATCH query combining OR and NEAR operators with snippet() to read freed heap memory and crash the process. | |
| Title | SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet() | |
| First Time appeared |
Sqlite
Sqlite sqlite |
|
| Weaknesses | CWE-416 | |
| CPEs | cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Sqlite
Sqlite sqlite |
|
| References |
|
|
| Metrics |
cvssV3_1
|