Description
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.
Remediation
References
Related Vulnerabilities
Perl Numeric Errors Vulnerability (CVE-2005-3962)
WordPress Plugin WP Easy Gallery Cross-Site Scripting (4.1)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5264)
Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-35029)
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2021-24066)