CVE-2019-16227

Critical

Published: —Translated: 20/07/2026(UTC)NVD NIST

Summary

An issue was discovered in py-lmdb 0.97 where for certain values of mn_flags, mdb_cursor_set triggers a memcpy with an invalid write operation within mdb_xcursor_init1. This occurs when accessing a data.mdb file supplied by an attacker.

Risk Assessment

An attacker can supply a specially crafted data.mdb file that, when opened by an application using py-lmdb, may cause an invalid memory write, potentially leading to a crash or arbitrary code execution.

Recommendation

Update py-lmdb to a version newer than 0.97 where this vulnerability is fixed. Avoid opening data.mdb files from untrusted sources.

Original NVD description (English source)

An issue was discovered in py-lmdb 0.97. For certain values of mn_flags, mdb_cursor_set triggers a memcpy with an invalid write operation within mdb_xcursor_init1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.