A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://www.sqlite.org/forum/forumpost/718c0a8d17 Exploit, Patch, Vendor Advisory
- https://www.sqlite.org/forum/forumpost/718c0a8d17 Exploit, Patch, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.5 · sqlite, oracle, appleNVD modified 2026-10-14 12:17
Affected (CPE criteria) 6
cpe:2.3:a:sqlite:sqlite:3.36.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
References 22
- http://seclists.org/fulldisclosure/2022/Oct/28 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/39 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/41 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/47 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/49 Mailing List, Third Party Advisory
- https://support.apple.com/kb/HT213446 Third Party Advisory
- https://support.apple.com/kb/HT213486 Third Party Advisory
- https://support.apple.com/kb/HT213487 Third Party Advisory
- https://support.apple.com/kb/HT213488 Third Party Advisory
- https://www.sqlite.org/forum/forumpost/718c0a8d17 Exploit, Patch, Vendor Advisory
- http://seclists.org/fulldisclosure/2022/Oct/28 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/39 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/41 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/47 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/49 Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00050.html
- https://support.apple.com/kb/HT213446 Third Party Advisory
- https://support.apple.com/kb/HT213486 Third Party Advisory
- https://support.apple.com/kb/HT213487 Third Party Advisory
- https://support.apple.com/kb/HT213488 Third Party Advisory
- https://www.sqlite.org/forum/forumpost/718c0a8d17 Exploit, Patch, Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html