CVE-2019-19926
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls.
Published Dec 23, 2019 · updated Oct 14, 2026 · sqlite sqlite
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
Timeline
Detection, updates, and resolution for this record.
Dec 23, 2019 · NIST NVD
Detected
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
Oct 14, 2026 · NIST NVD
Updated
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
Affected
- cpe debian/debian linux10.0
- cpe debian/debian linux9.0
- cpe netapp/cloud backupversion unspecified
- cpe opensuse/backports sle15.0
- cpe oracle/mysql workbenchversion unspecified
- cpe redhat/enterprise linux desktop6.0
- cpe redhat/enterprise linux server6.0
- cpe redhat/enterprise linux workstation6.0
- cpe siemens/sinec infrastructure network servicesversion unspecified
- cpe sqlite/sqlite3.30.1
- cpe suse/package hubversion unspecified
Sources
- CVE.orgCVE-2019-19926
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-19926
30-day exploitation probability 8.0%
first.org - NIST NVDCVE-2019-19926
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
nvd.nist.gov