CVE-2021-45346

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.

• CWE-401

• https://github.com/guyinatuxedo/sqlite3_record_leakingExploit, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220303-0001/Third Party Advisory
• https://sqlite.org/forum/forumpost/056d557c2f8c452ed5Vendor Advisory
• https://sqlite.org/forum/forumpost/53de8864ba114bf6Vendor Advisory
• https://www.sqlite.org/cves.html#status_of_recent_sqlite_cvesVendor Advisory
• https://github.com/guyinatuxedo/sqlite3_record_leakingExploit, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220303-0001/Third Party Advisory
• https://sqlite.org/forum/forumpost/056d557c2f8c452ed5Vendor Advisory
• https://sqlite.org/forum/forumpost/53de8864ba114bf6Vendor Advisory
• https://www.sqlite.org/cves.html#status_of_recent_sqlite_cvesVendor Advisory

Published

Feb 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45339Privilege escalation vulnerability in Avast Antivirus prior …7.8
• CVE-2021-45340In Libsixel prior to and including v1.10.3, a NULL pointer d…6.5
• CVE-2021-45341A buffer overflow vulnerability in CDataMoji of the jwwlib c…8.8
• CVE-2021-45342A buffer overflow vulnerability in CDataList of the jwwlib c…7.8
• CVE-2021-45343In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH h…5.5
• CVE-2021-45345Buffer Overflow vulnerability found in En3rgy WebcamServer v…7.5
• CVE-2021-45347An Incorrect Access Control vulnerability exists in zzcms 8.…7.5
• CVE-2021-45348An Arbitrary File Deletion vulnerability exists in SourceCod…7.5
• CVE-2021-45357Cross Site Scripting (XSS) vulnerability exists in Piwigo 12…6.1
• CVE-2021-45364A Code Execution vulnerability exists in Statamic Version th…9.8
• CVE-2021-45379Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect a…8.8
• CVE-2021-45380AppCMS 2.0.101 has a XSS injection vulnerability in \templat…6.1