Threats tagged 'ghsa-6w9f-4x4x-x559'

SQLite versions before 3.54.0 that are built with the session extension have a heap buffer overflow vulnerability in the sqlite3changeset_apply() function. This flaw allows attackers to corrupt heap memory by providing specially crafted changesets that exploit improper memory handling when a table name is repeated with a larger column count in a second changeset block.