Approved changes feed: RSS · Atom

cpe:2.3:a:sqlite:sqlite:3.27.2:*:*:*:*:*:*:*

part: a version: 3.27.2 update: *

VendorSqlite (2fa54148-3330-55ea-bc07-9c259c66b82f)
ProductSqlite (1c2c6e01-e158-5c50-a8e5-ac18a10b3bdd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/sqlite purl2cpe 2026-06-01 10:16:53.064850
pkg:deb/ubuntu/sqlite purl2cpe 2026-06-01 10:16:53.064851
pkg:github/sqlite/sqlite purl2cpe 2026-06-01 10:16:53.064853

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9937 vulnerable 2026-06-08 05:14:26.624627 Details available
In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.
Published: 2019-03-22T07:07:21.000Z
Updated: 2024-08-04T22:10:08.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9936 vulnerable 2026-06-08 05:14:26.623838 Details available
In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5_hash.c.
Published: 2019-03-22T07:07:04.000Z
Updated: 2024-08-04T22:01:55.188Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.