Threats tagged 'ghsa-24xm-6g3f-6mqq'

SQLite versions prior to 3.54.0 have a stack exhaustion vulnerability in the countOfViewOptimization() function. This flaw can be triggered by executing a count(*) query over a large multi-row VALUES clause or by supplying a crafted view with deeply nested TK_PLUS expressions. The recursive freeing of these expressions in sqlite3ExprDeleteNN() exhausts the C stack, leading to a denial of service by crashing the host process.