CVE-2020-11656

CVE-2020-11656 is a critical use-after-free vulnerability in SQLite versions up to 3.31.1, specifically within the ALTER TABLE implementation when processing an ORDER BY clause in a compound SELECT statement. This flaw affects numerous products from vendors such as NetApp, Oracle, Siemens, and Tenable. With a CVSS score of 9.8 (Critical), it presents a severe risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, including a CISA warning regarding ICS products.