Detections
Analytics
CVE-2024-0232
medium
Description
A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.
References
https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-02
https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08
https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-01
https://cert-portal.siemens.com/productcert/html/ssa-277137.html
https://cert-portal.siemens.com/productcert/html/ssa-000297.html
https://security.netapp.com/advisory/ntap-20240315-0007/
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16030
https://cert-portal.siemens.com/productcert/html/ssa-915275.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html