CVE-2019-19923

Publication date

2019-12-24 15:43:33

Family

mitre

State

PUBLISHED

Description

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).