SQLite Memory Corruption Vulnerability Due to Aggregate Term Overflow

A memory corruption vulnerability has been identified in SQLite versions prior to 3.50.2. The issue arises when the number of aggregate terms in a query exceeds the available columns, leading to potential memory corruption. This vulnerability can be exploited by crafting specific SQL queries that overload the aggregate term limit.

Impact

Exploitation of this vulnerability can result in memory corruption, which may lead to undefined behavior, including potential arbitrary code execution or causing the application to crash.

Remediation

Users are advised to upgrade to SQLite version 3.50.2 or later.