GCVE - cpe:2.3:a:py-lmdb_project:py-lmdb:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:py-lmdb_project:py-lmdb:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Py Lmdb Project (`8e3456f9-d649-58b4-aeec-89523fae6b8d`)
Product	Py Lmdb (`3028dcef-dab8-51c4-90be-c25c781b8ad3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/py-lmdb`	purl2cpe	2026-06-01 10:11:49.736565
`pkg:deb/ubuntu/py-lmdb`	purl2cpe	2026-06-01 10:11:49.736570
`pkg:github/jnwatson/py-lmdb`	purl2cpe	2026-06-01 10:11:49.736573

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-16228`	vulnerable	2026-06-08 05:13:07.925801	Details available An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdb_env_open2 if mdb_env_read_header obtains a zero value for a certain size field. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker. Published: 2019-09-11T14:46:45.000Z Updated: 2024-08-05T01:10:41.551Z Open on db.gcve.eu Reference links https://github.com/TeamSeri0us/pocs/tree/master/lmdb/FPE	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-16227`	vulnerable	2026-06-08 05:13:07.925529	Details available An issue was discovered in py-lmdb 0.97. For certain values of mn_flags, mdb_cursor_set triggers a memcpy with an invalid write operation within mdb_xcursor_init1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker. Published: 2019-09-11T14:47:02.000Z Updated: 2024-08-05T01:10:41.562Z Open on db.gcve.eu Reference links https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20memcpy%20illegal%20dst	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-16226`	vulnerable	2026-06-08 05:13:07.925247	Details available An issue was discovered in py-lmdb 0.97. mdb_node_del does not validate a memmove in the case of an unexpected node->mn_hi, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker. Published: 2019-09-11T14:47:13.000Z Updated: 2024-08-05T01:10:41.670Z Open on db.gcve.eu Reference links https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20memory%20corruption%20vuln	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-16225`	vulnerable	2026-06-08 05:13:07.924857	Details available An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker. Published: 2019-09-11T14:47:23.000Z Updated: 2024-08-05T01:10:41.679Z Open on db.gcve.eu Reference links https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20write%20to%20illegal%20address	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-16224`	vulnerable	2026-06-08 05:13:07.924360	Details available An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker. Published: 2019-09-11T14:47:37.000Z Updated: 2024-08-05T01:10:41.557Z Open on db.gcve.eu Reference links https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20initialization%20vuln	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Py Lmdb

Notes

PURL mappings

Vulnerability references

Contribute