In the SQLite DBMS (CVE-2019-5018), which allows executing arbitrary code in the system when there is a possibility to execute an SQL query crafted by an attacker. The issue is caused by a mistake in the implementation of window functions and manifests starting from the branch . The vulnerability in the April release without explicit mention of fixing security issues.
A specially crafted SQL query SELECT may lead to accessing a previously freed memory area (use-after-free), which could potentially be exploited to execute arbitrary code in the context of an application using SQLite. The vulnerability can be exploited if the application allows the transmission of SQL constructs from outside to SQLite.
For example, a potential attack can be carried out on the Chrome browser and applications utilizing the Chromium engine, as the WebSQL API is implemented over SQLite and interacts with this DBMS to process SQL queries from web applications. An attacker only needs to create a page with malicious JavaScript code and persuade the user to open it in a Chromium-based browser.
Source: opennet.ru
