CVE-2019-8457

SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.

• CWE-125
• CWE-125

• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00074.htmlThird Party Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10365
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPKYSWCOM3CL66RI76TYVIG6TJ263RXH/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJPFGA45DI4F5MCF2OAACGH3HQOF4G3M/
• https://security.netapp.com/advisory/ntap-20190606-0002/Third Party Advisory
• https://usn.ubuntu.com/4004-1/Third Party Advisory
• https://usn.ubuntu.com/4004-2/Third Party Advisory
• https://usn.ubuntu.com/4019-1/Third Party Advisory
• https://usn.ubuntu.com/4019-2/Third Party Advisory
• https://www.oracle.com/security-alerts/cpuapr2020.html
• https://www.oracle.com/security-alerts/cpujan2020.html
• https://www.oracle.com/security-alerts/cpujul2020.html
• https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlPatch, Third Party Advisory
• https://www.sqlite.org/releaselog/3_28_0.htmlRelease Notes, Vendor Advisory
• https://www.sqlite.org/src/info/90acdbfce9c08858Patch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00074.htmlThird Party Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10365
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPKYSWCOM3CL66RI76TYVIG6TJ263RXH/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJPFGA45DI4F5MCF2OAACGH3HQOF4G3M/
• https://security.netapp.com/advisory/ntap-20190606-0002/Third Party Advisory
• https://usn.ubuntu.com/4004-1/Third Party Advisory
• https://usn.ubuntu.com/4004-2/Third Party Advisory
• https://usn.ubuntu.com/4019-1/Third Party Advisory
• https://usn.ubuntu.com/4019-2/Third Party Advisory
• https://www.oracle.com/security-alerts/cpuapr2020.html
• https://www.oracle.com/security-alerts/cpujan2020.html
• https://www.oracle.com/security-alerts/cpujul2020.html
• https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlPatch, Third Party Advisory
• https://www.sqlite.org/releaselog/3_28_0.htmlRelease Notes, Vendor Advisory
• https://www.sqlite.org/src/info/90acdbfce9c08858Patch, Vendor Advisory

Published

May 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-8451The /plugins/servlet/gadgets/makeRequest resource in Jira be…6.5
• CVE-2019-8452A hard-link created from log file archive of Check Point Zon…7.8
• CVE-2019-8453Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.…
• CVE-2019-8454A local attacker can create a hard-link between a file to wh…7
• CVE-2019-8455A hard-link created from the log file of Check Point ZoneAla…7.1
• CVE-2019-8456Check Point IKEv2 IPsec VPN up to R80.30, in some less commo…5.9
• CVE-2019-8458Check Point Endpoint Security Client for Windows, with Anti-…4.4
• CVE-2019-8459Check Point Endpoint Security Client for Windows, with the V…
• CVE-2019-8460OpenBSD kernel version <= 6.5 can be forced to create long c…7.5
• CVE-2019-8461Check Point Endpoint Security Initial Client for Windows bef…
• CVE-2019-8462In a rare scenario, Check Point R80.30 Security Gateway befo…7.5
• CVE-2019-8463A denial of service vulnerability was reported in Check Poin…7.5