In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade sqlite3 | Aug 24, 2020 | Mar 22, 2019 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Aug 16, 2019 | Mar 22, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqliteUpgrade sqlite-libsUpgrade sqlite-docUpgrade sqlite-devel | Feb 26, 2020 | Mar 22, 2019 |
| Oracle Solaris | — | Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.28.0-11.4.10.0.1.1.0 on Solaris 11.4Upgrade database/sqlite-3/documentation to version 3.28.0-11.4.10.0.1.1.0 on Solaris 11.4Upgrade database/sqlite-3 to version 3.28.0-11.4.10.0.1.1.0 on Solaris 11.4Upgrade runtime/tcl-8 to version 8.6.7-11.4.10.0.1.1.0 on Solaris 11.4 | Jun 26, 2019 | Mar 22, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 22, 2019 |
| Suse | — | Upgrade sqlite3-docUpgrade libsqlite3-0Upgrade sqlite3-develUpgrade libsqlite3-0-32bitUpgrade sqlite3 | May 11, 2019 | Mar 22, 2019 |
| Ubuntu | — | Upgrade libsqlite3-0Upgrade sqlite3 | Jun 20, 2019 | Mar 22, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 22, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub