CyberRota Analysis
AI-GeneratedThe vulnerability affects the Ruby bindings for the SQLite3 embedded database in versions 2.9.4 and earlier, where redefining a SQLite function with a different arity can lead to a use-after-free condition. This flaw may allow an attacker to exploit the freed function handler, potentially leading to application crashes or arbitrary code execution. Developers and organizations using these Ruby bindings should prioritize upgrading to version 2.9.5 to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is fixed in version 2.9.5.