CVE-2019-16224

Critical

Published: —Translated: 20/07/2026(UTC)NVD NIST

Summary

An issue was discovered in py-lmdb 0.97 where for certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading to an invalid write operation. This occurs when accessing a data.mdb file supplied by an attacker.

Risk Assessment

An attacker can exploit this vulnerability to perform an invalid memory write, potentially causing application crashes or remote code execution if the application processes malicious data.mdb files.

Recommendation

Update py-lmdb to the latest version that includes a fix for this vulnerability. Avoid processing data.mdb files from untrusted sources.

Original NVD description (English source)

An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.