CVE-2020-13871 log

Source
Severity High
Remote No
Type Arbitrary code execution
Description
SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
Group Package Affected Fixed Severity Status Ticket
AVG-1182 sqlite 3.32.2-1 3.32.3-1 High Fixed
Date Advisory Group Package Severity Type
28 Jun 2020 ASA-202006-11 AVG-1182 sqlite High arbitrary code execution
References
https://www.sqlite.org/src/info/cd708fa84d2aaaea
https://www.sqlite.org/src/info/44a58d6cb135a104