CVE-2019-5018

An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this vulnerability.

• CWE-416
• CWE-416

• http://packetstormsecurity.com/files/152809/Sqlite3-Window-Function-Remote-Code-Execution.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/108294Broken Link
• https://security.gentoo.org/glsa/201908-09Third Party Advisory
• https://security.netapp.com/advisory/ntap-20190521-0001/Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0777Exploit, Third Party Advisory
• https://usn.ubuntu.com/4205-1/Third Party Advisory
• http://packetstormsecurity.com/files/152809/Sqlite3-Window-Function-Remote-Code-Execution.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/108294Broken Link
• https://security.gentoo.org/glsa/201908-09Third Party Advisory
• https://security.netapp.com/advisory/ntap-20190521-0001/Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0777Exploit, Third Party Advisory
• https://usn.ubuntu.com/4205-1/Third Party Advisory

Published

May 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5012An exploitable privilege escalation vulnerability exists in …7.8
• CVE-2019-5013An exploitable privilege escalation vulnerability exists in …7.8
• CVE-2019-5014An exploitable improper access control vulnerability exists …6.5
• CVE-2019-5015A local privilege escalation vulnerability exists in the Mac…7.8
• CVE-2019-5016An exploitable arbitrary memory read vulnerability exists in…9.1
• CVE-2019-5017An exploitable information disclosure vulnerability exists i…5.3
• CVE-2019-5019A heap-based overflow vulnerability exists in the PowerPoint…9.8
• CVE-2019-5020An exploitable denial of service vulnerability exists in the…5.5
• CVE-2019-5021Versions of the Official Alpine Linux Docker images (since v…9.8
• CVE-2019-5022Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-5023An exploitable vulnerability exists in the grsecurity PaX pa…5.9
• CVE-2019-5024A restricted environment escape vulnerability exists in the …7.6