CVE-2020-15358

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.32.3

Description The issue is related to a heap overflow in SQLite due to the misuse of transitive properties for constant propagation, which can lead to local information disclosure. This is caused by a missing bounds check in the sqlite3Select function of select.c, allowing for an out-of-bounds write. The vulnerability can be exploited to gain unauthorized access to protected information.

Recommendations For versions prior to 3.32.3, update to version 3.32.3 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update can be applied.