ZeroDay Findings
Sign inSign up

Findings

CVE-2019-9937

In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c.

Published Mar 22, 2019 · updated Oct 14, 2026 · sqlite sqlite

In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 22, 2019 · NIST NVD

    Detected

    In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.

  2. Oct 14, 2026 · NIST NVD

    Updated

    In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.

Affected

  • cpe sqlite/sqlite3.27.2

Sources

  • CVE.orgVulnerability recordCVE-2019-9937

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2019-9937

    30-day exploitation probability 6.1%

    first.org
  • NIST NVDVulnerability recordCVE-2019-9937

    In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.

    nvd.nist.gov

References

CVE-2019-9937 · ZeroDay Findings