ZeroDay Findings
Sign inSign up

Findings

CVE-2021-20227

A flaw was found in SQLite's SELECT query functionality (src/select.c).

Published Mar 23, 2021 · updated Oct 14, 2026 · sqlite sqlite

A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 23, 2021 · NIST NVD

    Detected

    A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.

Affected

  • cpe oracle/communications network charging and controlversion unspecified
  • cpe oracle/communications network charging and control6.0.1
  • cpe oracle/enterprise manager for oracle database13.4.0.0
  • cpe oracle/jd edwards enterpriseone toolsversion unspecified
  • cpe oracle/mysql workbenchversion unspecified
  • cpe oracle/outside in technology8.5.5
  • cpe oracle/zfs storage appliance kit8.8
  • cpe sqlite/sqliteversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2021-20227

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2021-20227

    30-day exploitation probability 0.7%

    first.org
  • NIST NVDVulnerability recordCVE-2021-20227

    A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat fro

    nvd.nist.gov

References