CVE-2019-8457

Critical

Published: —Translated: 05/07/2026(UTC)NVD NIST

Summary

SQLite3 from version 3.6.0 to 3.27.2 inclusive is vulnerable to a heap out-of-bounds read in the rtreenode() function when handling invalid rtree tables.

Risk Assessment

An attacker could exploit this vulnerability to access sensitive data in memory or cause application crashes, potentially leading to information disclosure or service disruption.

Recommendation

It is recommended to immediately upgrade SQLite3 to version 3.28.0 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.