CVE-2019-19926 multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple SQLite Vulnerabilities Discovered Affecting Applications Two vulnerabilities in SQLite have been identified, affecting versions 3.29.0 and 3.30.1. CVE-2019-16168 can cause application crashes due to a division by zero error in the query planner, while CVE-2019-19926 involves mishandling errors during parsing, stemming from an incomplete fix for a previous vulnerability. Both issues could impact applications relying on these SQLite versions. 2 sources 67

Extracted Entities

CVEs (1)

Platforms (1)