sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is fixed in version 2.9.5.
1.3.10-11.3.11-11.3.11-1build11.3.11-21.3.11-2build11.3.13-11.3.13-1build11.3.13-1build21.3.13-1build21.4.2-2build1Exploitability
AV:LAC:HAT:NPR:LUI:NVulnerable System
VC:LVI:LVA:LSubsequent System
SC:NSI:NSA:NCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N