CVE-2019-16168

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a “severe division by zero in the query planner.”

Mitigation

An user can mitigate the risk of this vulnerability by:

1. Avoid using ANALYZE command on queries;
2. Disabling the PRAGMA optimize for affected SQLite instances;