CVE-2021-36690: apple iphone_os
Vulnerability summary
CVE-2021-36690 is a high (CVSS 7.5) vulnerability in apple iphone_os. EPSS estimates a 3.90% chance of exploitation in the next 30 days, higher than 90.1% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 4 · Related 3Timeline
- 24-08-2021PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
3.90%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.90% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (sqlite.org)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- sqlite3< 3.36.0-2
Mageia1 product
- sqlite3< 3.34.1-1.2.mga8
Opensuse1 product
- sqlite3&distro=openSUSE Tumbleweed< 3.39.3-2.1
Oracle1 product
Sqlite1 product
- sqlite3.36.0
Ubuntu1 product
- sqlite3< 3.22.0-1ubuntu0.5 | < 3.31.1-4ubuntu0.3
7 vendors · 10 products
References
20 links- support.apple.com/kb/HT213446Third Party Advisory
- support.apple.com/kb/HT213488Third Party Advisory
- support.apple.com/kb/HT213486Third Party Advisory
- support.apple.com/kb/HT213487Third Party Advisory
