CVE-2019-16168 In SQLite through 3.29.0 whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field aka a "severe division by zero in the query planner."

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple SQLite Vulnerabilities Discovered Affecting Applications Two vulnerabilities in SQLite have been identified, affecting versions 3.29.0 and 3.30.1. CVE-2019-16168 can cause application crashes due to a division by zero error in the query planner, while CVE-2019-19926 involves mishandling errors during parsing, stemming from an incomplete fix for a previous vulnerability. Both issues could impact applications relying on these SQLite versions. 2 sources 67

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (1)