CVE-2019-19959
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-managemen…
Published Jan 3, 2020 · updated Oct 14, 2026 · sqlite sqlite
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.
Timeline
Detection, updates, and resolution for this record.
Jan 3, 2020 · NIST NVD
Detected
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.
Oct 14, 2026 · NIST NVD
Updated
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.
Affected
- cpe canonical/ubuntu linux16.04
- cpe canonical/ubuntu linux18.04
- cpe canonical/ubuntu linux19.10
- cpe sqlite/sqlite3.30.1
Sources
- CVE.orgVulnerability recordCVE-2019-19959
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2019-19959
30-day exploitation probability 3.4%
first.org - NIST NVDVulnerability recordCVE-2019-19959
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.
nvd.nist.gov