2 matches found
CVE-2019-19959: Undefined Security Weakness
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by for example valgrind...
7.5CVSS7.3AI score0.03156EPSS
SaveExploits0References1
CVE-2019-19925: Unrestricted Upload of File with Dangerous Type
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive...
7.5CVSS6.9AI score0.0681EPSS
SaveExploits0References2
20