CVE-2019-9937: Sqlite

High severity, CVSS 7.5. EPSS: 6% chance of exploitation in the next 30 days.

In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.

Affected products

• Sqlite Sqlite: version 3.27.2 only

Published 2019-03-22. Last modified 2026-06-17.