CVE-2020-13434
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Published May 24, 2020 · updated Oct 14, 2026 · sqlite sqlite
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Timeline
Detection, updates, and resolution for this record.
May 24, 2020 · NIST NVD
Detected
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Affected
- cpe apple/icloudversion unspecified
- cpe canonical/ubuntu linux16.04
- cpe canonical/ubuntu linux18.04
- cpe canonical/ubuntu linux19.10
- cpe canonical/ubuntu linux20.04
- cpe debian/debian linux8.0
- cpe debian/debian linux9.0
- cpe fedoraproject/fedora32
- cpe freebsd/freebsdversion unspecified
- cpe oracle/communications cloud native core policy1.14.0
- cpe sqlite/sqliteversion unspecified
Sources
- CVE.orgCVE-2020-13434
Official CVE identifier
cve.org - NIST NVDCVE-2020-13434
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
nvd.nist.gov