Description
The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.
Remediation
References
Related Vulnerabilities
PHP Reliance on Cookies without Validation and Integrity Checking Vulnerability (CVE-2020-7070)
WordPress Plugin WP Ad Guru Lite Cross-Site Scripting (1.6.0)
WordPress Plugin WPML (WordPress Multilingual) Cross-Site Request Forgery (4.3.6)
MySQL CVE-2019-2950 Vulnerability (CVE-2019-2950)
Oracle Database Server CVE-2023-22074 Vulnerability (CVE-2023-22074)