{"id":"CVE-2019-8457","revision":"38d47f6e617e474d906918c9b478c82b","records":[{"revision":"38d47f6e617e474d906918c9b478c82b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2019-8457","aliases":[],"title":"SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.","description":"SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.","state":0,"publishedAt":"2019-05-30T15:51:52+00:00","modifiedAt":"2026-10-14T06:49:36.663+00:00","affected":[{"ecosystem":"Vendor product","name":"SQLite","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"SQLite\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"From 3.6.0 to 3.27.2 including\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://usn.ubuntu.com/4004-1/","https://usn.ubuntu.com/4004-2/","https://usn.ubuntu.com/4019-1/","https://usn.ubuntu.com/4019-2/","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00074.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJPFGA45DI4F5MCF2OAACGH3HQOF4G3M/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPKYSWCOM3CL66RI76TYVIG6TJ263RXH/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.sqlite.org/src/info/90acdbfce9c08858","https://www.sqlite.org/releaselog/3_28_0.html","https://security.netapp.com/advisory/ntap-20190606-0002/","https://kc.mcafee.com/corporate/index?page=content&id=SB10365"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2019-8457","license":"CVE Program Terms of Use","key":"cve-program:CVE-2019-8457","identifiers":["CVE-2019-8457"]},"retained":false,"historicalAffected":[]}],"coverage":[]}