CVE-2019-5018

2019-05-1019:29:07

Google

osv.dev

8 High

AI Score

Confidence

Low

0.087 Low

EPSS

Percentile

94.6%

JSON

An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this vulnerability.

CPENameOperatorVersion
sqliteeqersion-3.11.0
sqliteeq3.8.0.1-r2
sqliteeqfts3-refactor
sqliteeq3.8.11.1-r2
sqliteeq3.7.7.1-r2
sqliteeqersion-3.7.4
sqliteeq3.8.0-r2
sqliteeq3.7.15-r2
sqliteeq3.27.2-r0
sqliteeqersion-3.7.6.1

Name	Operator	Version
sqlite	eq	ersion-3.11.0
sqlite	eq	3.8.0.1-r2
sqlite	eq	fts3-refactor
sqlite	eq	3.8.11.1-r2
sqlite	eq	3.7.7.1-r2
sqlite	eq	ersion-3.7.4
sqlite	eq	3.8.0-r2
sqlite	eq	3.7.15-r2
sqlite	eq	3.27.2-r0
sqlite	eq	ersion-3.7.6.1