Threats tagged 'ghsa-mw7g-h5m4-mrxh'

SQLite versions before 3.54.0 built with the FTS5 extension contain a heap buffer overflow vulnerability in the fts5MergeRowidLists() function. This flaw occurs because the function undersizes the output buffer when merging detail=none prefix doclists. An attacker able to insert negative rowids into a detail=none FTS5 table and execute a prefix MATCH query can trigger a heap overflow, leading to memory corruption and potential process crashes.