An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
Weakness
Using realloc() to resize buffers that store sensitive information can leave the sensitive information exposed to attack, because it is not removed from memory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sqlite | Ubuntu | upstream | * |