SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow

CVE-2023-7104

What is CVE-2023-7104?

A vulnerability exists in SQLite3 that affects the sessionReadRecord function, specifically within the ext/session/sqlite3session.c file. This vulnerability results in a heap-based buffer overflow, which could be exploited to potentially compromise the security of systems using SQLite3 up to version 3.43.0. It is highly recommended for users to apply the relevant patches to mitigate this issue effectively. For further details, including technical descriptions and patches, consult the provided references.

References