CyberRota Analysis
AI-GeneratedThe SQLite Session Extension in version 3.53.1 and earlier is vulnerable to a NULL pointer dereference, which can be exploited by an attacker supplying a malformed changeset blob. This vulnerability can lead to a denial of service, disrupting the functionality of applications relying on SQLite for data management. Organizations using affected versions of SQLite should prioritize patching to mitigate potential service interruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can supply a malformed changeset blob to cause a denial of service. The issue occurs when sqlite3changeset_apply_v3() applies a corrupt changeset and reaches sqlite3_value_type() with a NULL sqlite3_value pointer.