SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 6, 2020 |
| Debian | — | Upgrade sqlite3 | Aug 24, 2020 | Jun 6, 2020 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Jul 28, 2020 | Jun 6, 2020 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.32.3-11.4.27.0.1.82.0 on Solaris 11.4Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.32.3-11.4.27.0.1.82.0 on Solaris 11.4Upgrade database/sqlite-3/documentation to version 3.32.3-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jun 6, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub