CVE advisoryCRITICAL
CVE-2019-8457
SQLite Out-of-Bounds Read in rtreenode Function
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A heap out-of-bounds read vulnerability exists in SQLite3's `rtreenode()` function when processing invalid rtree tables. This could allow an attacker to read memory beyond allocated boundaries, potentially leading to information disclosure or system instability. The issue impacts versions of SQLite3 from 3.6.0 up to an