CVE-2019-8457

sqlite: heap out-of-bound read in function rtreenode()

Published May 30, 2019 CVSS 3.1 · 9.8 Critical EPSS 45.4% KEV · Not listed
Description
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Ubuntu USN Ubuntu USN USN-4004-1 Berkeley DB vulnerability
Ubuntu USN Ubuntu USN USN-4004-2 Berkeley DB vulnerability
Ubuntu USN Ubuntu USN USN-4019-1 SQLite vulnerabilities
Ubuntu USN Ubuntu USN USN-4019-2 SQLite vulnerabilities
Weaknesses

Sources

Status
PUBLISHED
Assigner
checkpoint
Published
Updated
Oct 14, 2026, 6:49 AM
Reserved
Feb 18, 2019, 12:00 AM
Status
Modified
Published
May 30, 2019, 4:29 PM
Modified
Oct 14, 2026, 7:16 AM
Severity
Moderate
Public date
Mar 20, 2019, 12:00 AM