CVE-2021-36690

A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.

• http://seclists.org/fulldisclosure/2022/Oct/28Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Oct/39Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Oct/41Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Oct/47Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Oct/49Mailing List, Third Party Advisory
• https://support.apple.com/kb/HT213446Third Party Advisory
• https://support.apple.com/kb/HT213486Third Party Advisory
• https://support.apple.com/kb/HT213487Third Party Advisory
• https://support.apple.com/kb/HT213488Third Party Advisory
• https://www.sqlite.org/forum/forumpost/718c0a8d17Exploit, Patch, Vendor Advisory
• http://seclists.org/fulldisclosure/2022/Oct/28Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Oct/39Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Oct/41Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Oct/47Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Oct/49Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/09/msg00050.html
• https://support.apple.com/kb/HT213446Third Party Advisory
• https://support.apple.com/kb/HT213486Third Party Advisory
• https://support.apple.com/kb/HT213487Third Party Advisory
• https://support.apple.com/kb/HT213488Third Party Advisory
• https://www.sqlite.org/forum/forumpost/718c0a8d17Exploit, Patch, Vendor Advisory

Published

Aug 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-36667Command injection vulnerability in Druva inSync 6.9.0 for Ma…7.8
• CVE-2021-36668URL injection in Driva inSync 6.9.0 for MacOS, allows attack…7.8
• CVE-2021-3667An improper locking issue was found in the virStoragePoolLoo…6.5
• CVE-2021-36686Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allow…5.4
• CVE-2021-36689An issue discovered in com.samourai.wallet.PinEntryActivity.…5.5
• CVE-2021-3669A flaw was found in the Linux kernel. Measuring usage of the…5.5
• CVE-2021-36691libjxl v0.5.0 is affected by a Assertion failed issue in lib…7.5
• CVE-2021-36692libjxl v0.3.7 is affected by a Divide By Zero in issue in li…6.5
• CVE-2021-36695Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in D…5.4
• CVE-2021-36696Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in D…5.4
• CVE-2021-36697With an admin account, the .htaccess file in Artica Pandora …6.7
• CVE-2021-36698Pandora FMS through 755 allows XSS via a new Event Filter wi…5.4