CVE-2019-16168

Name of the Vulnerable Software and Affected Versions SQLite versions 3.29.0 and earlier

Description The issue is related to a division by zero error in the query planner, specifically in the whereLoopAddBtreeIndex function. This error can cause a browser or other application to crash. The problem arises from missing validation of a sqlite stat1 sz field.

Recommendations For SQLite versions 3.29.0 and earlier, update to a version later than 3.29.0 to resolve the issue. As a temporary workaround, consider restricting the use of the whereLoopAddBtreeIndex function in sqlite3.c until a patch is available.