CVE-2019-19924

Medium

Published: —Translated: 06/07/2026(UTC)NVD NIST

Summary

SQLite 3.30.1 mishandles parser-tree rewriting in the sqlite3WindowRewrite() function, affecting expr.c, vdbeaux.c, and window.c. The vulnerability is caused by incorrect error handling during window query rewriting.

Risk Assessment

An attacker could exploit this vulnerability to cause unexpected database behavior, potentially leading to crashes or data integrity issues.

Recommendation

Upgrade SQLite to version 3.30.2 or later, which includes a fix for this issue.

Original NVD description (English source)

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.