SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late. CREATE(Triage):(User=admin) [CVE-2020-13871|https://nvd.nist.gov/vuln/detail/CVE-2020-13871]