CVE-2019-8457

Name of the Vulnerable Software and Affected Versions SQLite3 versions 3.6.0 through 3.27.2

Description The issue is related to a heap out-of-bound read in the rtreenode() function when handling invalid rtree tables. This can potentially allow a remote attacker to cause a denial of service, execute arbitrary code, or disclose protected information.

Recommendations For SQLite3 versions 3.6.0 through 3.27.2, consider updating to a version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.