Threats tagged 'ghsa-gf9q-68cx-3mq4'

SQLite versions prior to 3.54.0 contain a use-after-free vulnerability in the R-Tree extension. This flaw allows attackers to cause applications to use freed heap memory by manipulating the %_node shadow table. Specifically, supplying a database that declares %_node WITHOUT ROWID or includes a RAISE(IGNORE) trigger causes nodeWrite() to hash nodes as zero, leading to a crash after node splits.