ZeroDay Findings
Sign inSign up

Findings

CVE-2019-19925

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

Published Dec 24, 2019 · updated Oct 14, 2026 · sqlite sqlite

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 24, 2019 · NIST NVD

    Detected

    zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

  2. Oct 14, 2026 · NIST NVD

    Updated

    zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

Affected

  • cpe debian/debian linux10.0
  • cpe debian/debian linux9.0
  • cpe netapp/cloud backupversion unspecified
  • cpe opensuse/backports sle15.0
  • cpe oracle/mysql workbenchversion unspecified
  • cpe redhat/enterprise linux desktop6.0
  • cpe redhat/enterprise linux server6.0
  • cpe redhat/enterprise linux workstation6.0
  • cpe siemens/sinec infrastructure network servicesversion unspecified
  • cpe sqlite/sqlite3.30.1
  • cpe suse/package hubversion unspecified

Sources

  • CVE.orgCVE-2019-19925

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2019-19925

    30-day exploitation probability 6.8%

    first.org
  • NIST NVDCVE-2019-19925

    zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

    nvd.nist.gov

References