CVE-2019-8457
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Published May 30, 2019 · updated Oct 14, 2026 · sqlite sqlite
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 30, 2019 · NIST NVD
Detected
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Oct 14, 2026 · NIST NVD
Updated
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Affected
- cpe canonical/ubuntu linux14.04
- cpe canonical/ubuntu linux16.04
- cpe canonical/ubuntu linux18.04
- cpe canonical/ubuntu linux18.10
- cpe canonical/ubuntu linux19.04
- cpe fedoraproject/fedora29
- cpe fedoraproject/fedora30
- cpe sqlite/sqliteversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2019-8457
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2019-8457
30-day exploitation probability 45.4%
first.org - NIST NVDVulnerability recordCVE-2019-8457
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
nvd.nist.gov