Threats tagged 'ghsa-72w2-rjgg-q729'

SQLite versions before 3.54.0 have an information disclosure vulnerability that allows attackers to read uninitialized page-cache memory. This occurs when an attacker supplies a Write-Ahead Logging (WAL) file with an undersized page size, causing queries such as substr() to return stale bytes. These stale bytes can disclose data from other table rows and internal pointers.