CVE-2015-3415
No CVSS score yet. EPSS 4.1% chance of exploitation in the next 30 days.
The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.
- EPSS
- 4.1% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- CWE
- CWE-404
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:mac_os_x
- apple:watchos
- canonical:ubuntu_linux
- debian:debian_linux
- php:php
- sqlite:sqlite