Threats tagged 'ghsa-p82x-8j2g-f2c7'

SQLite versions before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contain a use-after-free vulnerability in the fts3BestSnippet() function. This flaw is triggered by dangling cached position-list pointers when running a full-text MATCH query that combines OR and NEAR operators with snippet(). Exploitation can lead to reading freed heap memory and crashing the process.