Security Advisory

CVE-2019-16168

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-09-09 16:07:15
Last updated 2026-05-28 18:37:58
Assigner mitre
State PUBLISHED

Description

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."