An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
{ "cpes": [ "cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*" ], "severity": "Medium" }