{"id":"ASB-A-192606047","details":"In resetAccumulator of select.c, there is a possible use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-192606047","BIT-sqlite-2020-13871","CVE-2020-13871"],"modified":"2026-03-11T06:03:49.045056Z","published":"2021-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/external/sqlite/+/84500124e617d2548c2b2374eb84a3e0ea8884d1"}],"affected":[{"package":{"name":"platform/external/sqlite","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-11-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4"],"severity":"High","types":["ID"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["199070197837573109235156897693055841300","254229894017524972120709405948172853767","117289713787236159983045952722556725477","83075987026358748734830566620063112306","7951125864893504766005905678806805383","104963192835081057512602139196411208570","171430600765845378393951066638538628914","257962578340537201723776040392316058654","131926247557348145843231241367400661900","174979528478897803753253515073224595790","209870398122955359073428200172119955405","151050557461900282148771416907916700869","192452138068915417185948228625881482141","156071605387590786447646150247604637989","186028635102580737276515053699023068249","32672734626909332816955162695109279063","336787501190228960756609026893114263296","281321620965984176234404433852957354689","121917876313134938879789596470941777206","247277293272431472357093088916183137262","155501003580640798209743296459903212720","72620454220112932562903483715801679517","55110336105843603319763953298770415242","48459986241853125501561029874123365719","330013460199952738388137397509706555698","227916312026899335266338704526692135876","273125721437435892088513926859510148025","67190533239793431795105156594994158624","274394521767918648042752744476929774494","139821460379877225986311840565084910524","206435657768126014631598430801510681322","333322203081154416177587936163218910128","177647646310442064110094650501263765181","4035537528797314661689936524946104175"]},"target":{"file":"dist/orig/sqlite3.c"},"source":"https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4","signature_version":"v1","id":"ASB-A-192606047-0e0c6533","signature_type":"Line","deprecated":false},{"digest":{"length":20343,"function_hash":"9583414208414743158198687778122929959"},"target":{"file":"dist/orig/sqlite3.c","function":"sqlite3Select"},"source":"https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4","signature_version":"v1","id":"ASB-A-192606047-146d30a6","signature_type":"Function","deprecated":false},{"digest":{"threshold":0.9,"line_hashes":["199070197837573109235156897693055841300","254229894017524972120709405948172853767","117289713787236159983045952722556725477","83075987026358748734830566620063112306","7951125864893504766005905678806805383","104963192835081057512602139196411208570","171430600765845378393951066638538628914","257962578340537201723776040392316058654","131926247557348145843231241367400661900","174979528478897803753253515073224595790","209870398122955359073428200172119955405","151050557461900282148771416907916700869","192452138068915417185948228625881482141","156071605387590786447646150247604637989","186028635102580737276515053699023068249","32672734626909332816955162695109279063","336787501190228960756609026893114263296","281321620965984176234404433852957354689","121917876313134938879789596470941777206","247277293272431472357093088916183137262","155501003580640798209743296459903212720","72620454220112932562903483715801679517","55110336105843603319763953298770415242","48459986241853125501561029874123365719","330013460199952738388137397509706555698","227916312026899335266338704526692135876","273125721437435892088513926859510148025","67190533239793431795105156594994158624","274394521767918648042752744476929774494","139821460379877225986311840565084910524","206435657768126014631598430801510681322","333322203081154416177587936163218910128","177647646310442064110094650501263765181","4035537528797314661689936524946104175"]},"target":{"file":"dist/sqlite3.c"},"source":"https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4","signature_version":"v1","id":"ASB-A-192606047-50466683","signature_type":"Line","deprecated":false},{"digest":{"length":271,"function_hash":"276913520737806181320022957505775357805"},"target":{"file":"dist/orig/sqlite3.c","function":"fts5SourceIdFunc"},"source":"https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4","signature_version":"v1","id":"ASB-A-192606047-50bf6543","signature_type":"Function","deprecated":false},{"digest":{"length":1950,"function_hash":"331916474429917678620842977669099184144"},"target":{"file":"dist/sqlite3.c","function":"sqlite3ColumnsFromExprList"},"source":"https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4","signature_version":"v1","id":"ASB-A-192606047-65f265df","signature_type":"Function","deprecated":false},{"digest":{"length":20343,"function_hash":"9583414208414743158198687778122929959"},"target":{"file":"dist/sqlite3.c","function":"sqlite3Select"},"source":"https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4","signature_version":"v1","id":"ASB-A-192606047-7cf2cc66","signature_type":"Function","deprecated":false},{"digest":{"length":271,"function_hash":"276913520737806181320022957505775357805"},"target":{"file":"dist/sqlite3.c","function":"fts5SourceIdFunc"},"source":"https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4","signature_version":"v1","id":"ASB-A-192606047-953b8ee2","signature_type":"Function","deprecated":false},{"digest":{"length":7286,"function_hash":"316533365345574809383620359631629669570"},"target":{"file":"dist/orig/sqlite3.c","function":"multiSelect"},"source":"https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4","signature_version":"v1","id":"ASB-A-192606047-a7c748a5","signature_type":"Function","deprecated":false},{"digest":{"length":5510,"function_hash":"68185368294323549256030120146732788245"},"target":{"file":"dist/sqlite3.c","function":"flattenSubquery"},"source":"https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4","signature_version":"v1","id":"ASB-A-192606047-c9588e25","signature_type":"Function","deprecated":false},{"digest":{"length":1950,"function_hash":"331916474429917678620842977669099184144"},"target":{"file":"dist/orig/sqlite3.c","function":"sqlite3ColumnsFromExprList"},"source":"https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4","signature_version":"v1","id":"ASB-A-192606047-db351322","signature_type":"Function","deprecated":false},{"digest":{"length":7286,"function_hash":"316533365345574809383620359631629669570"},"target":{"file":"dist/sqlite3.c","function":"multiSelect"},"source":"https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4","signature_version":"v1","id":"ASB-A-192606047-de8a85bb","signature_type":"Function","deprecated":false},{"digest":{"length":5510,"function_hash":"68185368294323549256030120146732788245"},"target":{"file":"dist/orig/sqlite3.c","function":"flattenSubquery"},"source":"https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4","signature_version":"v1","id":"ASB-A-192606047-ec365df1","signature_type":"Function","deprecated":false}],"spl":"2021-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv-test/ASB-A-192606047.json"}}],"schema_version":"1.7.5"}