CWE Code: 416
Vulnerability Type: sql_injection
CVSS Score: 6.8
CWE Name:  Use After Free
Summary: an exploitable use after free vulnerability exists in the window function functionality of sqlite3 3.26.0. a specially crafted sql command can cause a use after free vulnerability, potentially resulting in remote code execution. an attacker can send a malicious sql command to trigger this vulnerability.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-05-10
Last Modified Date: 2019-05-21