CVE-2020-13630 ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SQLite Vulnerabilities CVE-2020-13630 and CVE-2023-7104 Published CVE-2020-13630, a use-after-free vulnerability in SQLite before version 3.32.0, was published on May 27, 2020. Additionally, CVE-2023-7104, related to session handling in SQLite3, was published on December 25, 2023. Both vulnerabilities affect users of SQLite software. 2 sources 39