REDHAT-BUG-2359553: Buffer Overflow

Published Apr 14, 2025

Updated

An integer overflow can be triggered in SQLite’s concatws() function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.

Affected Software

1 affected component

SQLite SQLite

Event History

Apr 14, 2025

Data Sourced

via Red Hat·05:01 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2359553?

The severity of REDHAT-BUG-2359553 is high due to the potential for a wild Heap Buffer overflow.

How do I fix REDHAT-BUG-2359553?

To fix REDHAT-BUG-2359553, you should update SQLite to the latest patched version provided by your distribution.

What causes the vulnerability in REDHAT-BUG-2359553?

The vulnerability in REDHAT-BUG-2359553 is caused by an integer overflow in the `concat_ws()` function in SQLite.

Which software is affected by REDHAT-BUG-2359553?

REDHAT-BUG-2359553 affects the SQLite software, particularly vulnerable versions prior to the patch.

What are the potential consequences of exploiting REDHAT-BUG-2359553?

Exploiting REDHAT-BUG-2359553 can lead to a Heap Buffer overflow, potentially allowing arbitrary code execution or crashes.