CPE Details
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:sqlite:sqlite:3.48.0:*:*:*:*:*:*:*
Informations
Vendor
sqliteProduct
sqliteVersion
3.48.0Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. | 7.2 |
Haute |
||
| In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer overflow occurs in calculating the size of the result buffer, and thus malloc may not allocate enough memory. | 7.5 |
Haute |
