SQLite vulnerabilities

An issue was discovered in certain Apple products related to the 'SQLite' component. Affects iOS before 11, macOS before 10.13, iCloud before 7.0 on Windows, tvOS before 11, and watchOS before 4.

SQLite version 3.20.1 has a NULL pointer dereference in the tableColumnList function in shell.c. This issue occurs because certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false are not considered, leading to an uninitialized data structure.

An issue was discovered in certain Apple products, including iOS before 10.3.2 and macOS before 10.12.5, involving the 'SQLite' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.

An issue was discovered in certain Apple products, including iOS before 10.3.2 and macOS before 10.12.5, related to the 'SQLite' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.

Multiple unspecified vulnerabilities in SQLite before version 3.8.10.2, as used in Apple iOS before version 9, may lead to unknown impact and attack vectors.

Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash).

The sqlite3VXPrintf function in SQLite before version 3.8.9 does not properly handle precision and width values during floating-point conversions, which can lead to integer overflow and stack-based buffer overflow. Attackers can exploit this in context to cause denial of service or potentially other unspecified impacts.

The sqlite3VdbeExec function in SQLite before version 3.8.9 does not properly implement comparison operators, allowing attackers to cause a denial of service or potentially other unspecified impacts via a crafted CHECK clause.

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, allowing context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause.

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.

A vulnerability in SQLite before version 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

A vulnerability in SQLite up to version 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

SQLite 3.30.1 mishandles parser-tree rewriting in the sqlite3WindowRewrite() function, affecting expr.c, vdbeaux.c, and window.c. The vulnerability is caused by incorrect error handling during window query rewriting.

A critical vulnerability was found in SQLite3 up to version 3.43.0 in the sessionReadRecord function of ext/session/sqlite3session.c. Manipulation leads to a heap-based buffer overflow, potentially allowing remote code execution.

SQLite 'sqldiff.exe' does not securely handle Unicode to ANSI codepage conversion on Windows, allowing an attacker to load an arbitrary DLL via the '-L' option and misinterpret command line arguments.

An issue was discovered in certain Apple products, including iOS before 11, macOS before 10.13, tvOS before 11, and watchOS before 4, related to the third-party product 'SQLite'. Versions before 3.19.3 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

An issue was discovered in certain Apple products, including iOS before 11, macOS before 10.13, tvOS before 11, and watchOS before 4, related to the third-party 'SQLite' product. Versions before 3.19.3 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

An issue was discovered in certain Apple products, including iOS before 11, macOS before 10.13, tvOS before 11, and watchOS before 4, related to the third-party 'SQLite' product. Versions before 3.19.3 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.

An issue was discovered in certain Apple products related to the 'SQLite' component. This affects iOS versions before 10.3.2, macOS versions before 10.12.5, tvOS versions before 10.2.1, and watchOS versions before 3.2.2.

An issue was discovered in certain Apple products related to the 'SQLite' component. Affects iOS before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, and watchOS before 3.2.2. This issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted SQL statement.

An issue was discovered in certain Apple products related to the 'SQLite' component. This affects iOS versions before 10.3.2, macOS versions before 10.12.5, tvOS versions before 10.2.1, and watchOS versions before 3.2.2.

An issue was discovered in certain Apple products, involving the 'SQLite' component. iOS versions before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, and watchOS before 3.2.2 are vulnerable to a use-after-free vulnerability that can lead to arbitrary code execution or application crashes.

A buffer overflow vulnerability in SQLite affects source snapshots/builds containing a specific Fossil check-in. An attacker can exploit this to cause a denial of service via components related to the sqlar_uncompress function.

A vulnerability in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path.

A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and trunk builds before e807d4e3798efd53 allows an attacker to cause a denial of service by supplying a malformed changeset blob. The issue occurs when sqlite3changeset_apply_v3() processes a corrupt changeset and calls sqlite3_value_type() with a NULL pointer.

Heap-based buffer overflow vulnerability in the FTS5 extension of SQLite before version 3.53.2. An attacker can supply a crafted database, causing a crash or arbitrary code execution during FTS5 MATCH query processing.

Memory corruption vulnerabilities in the FTS5 extension of SQLite before version 3.53.2. An attacker can supply a crafted database, causing process crashes, memory exhaustion, or arbitrary code execution during FTS5 MATCH query processing.