CVE-2019-16168

Publication date

2019-09-09 16:07:15

Family

mitre

State

PUBLISHED

Description

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."