Memory Leak Vulnerability in SQLite3 from SQLite Project

CVE-2021-45346

What is CVE-2021-45346?

A memory leak vulnerability exists in SQLite3 versions 3.35.1 and 3.37.0, allowing attackers to execute specially crafted SQL queries that access unexpected memory regions. By manipulating the database file, a malicious actor can extract sensitive information by querying a record, resulting in the exposure of additional memory bytes beyond the intended data. This behavior raises potential privacy concerns, especially if the database contains confidential information. While the developer argues that this may not constitute a vulnerability, the implications for data privacy and integrity remain significant.

References