exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sqlite | Sqlite | 3.30.1 (including) | 3.30.1 (including) |
| Red Hat Enterprise Linux 6 Supplementary | RedHat | chromium-browser-0:80.0.3987.87-1.el6_10 | * |
| Sqlite3 | Ubuntu | disco | * |
| Sqlite3 | Ubuntu | eoan | * |
| Sqlite3 | Ubuntu | trusty | * |