CVE-2019-8457
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Published May 30, 2019 · updated Oct 14, 2026 · sqlite sqlite
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Timeline
Detection, updates, and resolution for this record.
May 30, 2019 · NIST NVD
Detected
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Oct 14, 2026 · NIST NVD
Updated
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Affected
- cpe canonical/ubuntu linux14.04
- cpe canonical/ubuntu linux16.04
- cpe canonical/ubuntu linux18.04
- cpe canonical/ubuntu linux18.10
- cpe canonical/ubuntu linux19.04
- cpe fedoraproject/fedora29
- cpe fedoraproject/fedora30
- cpe sqlite/sqliteversion unspecified
Sources
- CVE.orgCVE-2019-8457
Official CVE identifier
cve.org - NIST NVDCVE-2019-8457
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
nvd.nist.gov