Threats tagged 'ghsa-gr85-mf7f-6pq7'

SQLite versions before 3.54.0 built with the FTS5 extension contain a heap buffer overflow vulnerability in the fts5DoSecureDelete() function. This flaw allows attackers to write beyond the allocated leaf page buffer by supplying a crafted database file with a corrupted FTS5 index. When secure-delete is enabled and the corrupted index is deleted, heap memory corruption and application crashes can occur.