The vulnerability stems from incorrect lifetime bounds on closure parameters in various hook/function registration methods. The RustSec advisory (RUSTSEC-2021-0128) explicitly lists these functions as vulnerable due to their ability to accept closures that might capture stack-allocated values. The GitHub issue #1048 demonstrates a concrete use-after-free scenario with update_hook, and the advisory explains the pattern applies to all listed functions that register callbacks with SQLite. The functions are grouped by feature flags (hooks/functions/collation) but share the same core lifetime management flaw.