CVE-2024-22682

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

PYSEC-2024-25

DuckDB =0.9.2 and DuckDB extension-template =0.9.2 are vulnerable to malicious extension injection via the custom extension feature...

PT-2024-19529 · Duckdb +1 · Duckdb +1

Name of the Vulnerable Software and Affected Versions: DuckDB versions prior to 0.9.3 DuckDB extension-template versions prior to 0.9.3 Description: The issue allows for malicious extension injection through the custom extension feature. Recommendations: For DuckDB versions prior to 0.9.3, update...

CVE-2024-22682

...

CVE-2024-22682

CVE-2024-22682 concerns DuckDB and its extension-template. Affected: DuckDB versions prior to 0.9.3 and DuckDB extension-template prior to 0.9.3. Issue: malicious extension injection via the custom extension feature. Impact: allows injection through the extension mechanism as described by multipl...

Number withdrawn

DuckDB is an in-process SQL OLAP database management system from DuckDB Open Source. This CVE number has been withdrawn...

OSV-2022-487 Heap-use-after-free in duckdb::Planner::CreatePlan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48062 Crash type: Heap-use-after-free READ 1 Crash state: duckdb::Planner::CreatePlan duckdb::Planner::CreatePlan duckdb::ClientContext::CreatePreparedStatement...