All vulnerabilities

Servers and applications

CVE-2021-36690

A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.

Severity
High 7.5
Published
24 Aug 2021
Last changed
14 Oct 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
SQLiteServers and applications · cpe:a:sqlite:sqlite
  • Version 3.36.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-36690
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-36690