A NULL pointer dereference in the SQLite Session Extension allows an attacker to cause a denial of service by supplying a malformed changeset blob. This occurs when the `sqlite3changeset apply v3()` function applies a corrupt changeset and calls `sqlite3 value type()` using a NULL `sqlite3 value` pointer.