CVE-2021-45346
mediumpriority · track · 18EPSS 0.016 · 76 %ileDEEUUSEPSS · scored 2026-10-22
A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (8)
Products and version ranges known to be affected.
- netapp ontap select deploy administration utilityall versionsnvdUScpe:2.3:a:netapp:ontap_select_deploy_administration_utility:*:*:*:*:*:*:*:*
advisories (3)
Vendor and ecosystem advisories describing this.
- SCA-2025-0006Vulnerability affecting picoScan and multiScan2025-04-28csaf · sick_psirtDE
SICK has identified a Denial of Service vulnerability (CVE-2025-32472) in picoScan and multiScan, which can cause the web page to become unresponsive. Due to their architectural design, these products are not affected by the other vulnerabilities listed in this advisory. Currently SICK is not aware of any public exploits specifically targeting the vulnerability. SICK recommends applying the mitigation for CVE-2025-32472.
- WID-SEC-W-2023-1614Tenable Security Nessus Network Monitor: Mehrere SchwachstellenDeutsch2023-06-29csaf · cert_bundDE
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.
- BIT-sqlite-2021-453462024-03-06vendor · osvUS
A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (17)
External citations — patches, advisories, analysis.
- https://github.com/guyinatuxedo/sqlite3_record_leakingcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2021-45346cnnvd
- https://security.netapp.com/advisory/ntap-20220303-0001/cnnvd
- https://sqlite.org/forum/forumpost/056d557c2f8c452ed5cnnvd
- https://sqlite.org/forum/forumpost/53de8864ba114bf6cnnvd
- https://www.auscert.org.au/bulletins/ESB-2023.3732cnnvd
- https://www.sqlite.org/cves.html#status_of_recent_sqlite_cvescnnvd
- https://github.com/guyinatuxedo/sqlite3_record_leakingenisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan