DISPUTED A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.
SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where sqlite3step(pStmt)==SQLITEROW is false and a data structure is never initialized.
End of life: 9/18/2004, Latest version: 2.8.17
End of life: 9/18/2004, Latest version: 2.8.17
End of life: 9/28/2001, Latest version: 1.0.32
End of life: 9/28/2001, Latest version: 1.0.32