CyberRota Analysis
AI-GeneratedThe Ruby bindings for the SQLite3 embedded database are vulnerable due to a use-after-free issue in the callbacks used for aggregate functions, which can lead to potential exploitation during aggregation. This vulnerability affects versions 2.1.0 to 2.9.4, and users should upgrade to version 2.9.5 to mitigate risks. Developers and organizations utilizing these Ruby bindings in their applications should prioritize this update to ensure the security and stability of their systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is fixed in version 2.9.5.