flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).
{ "vanir_signatures": [ { "signature_type": "Function", "digest": { "length": 5590.0, "function_hash": "330814732743507439986540557302774929713" }, "source": "https://github.com/sqlite/sqlite/commit/396afe6f6aa90a31303c183e11b2b2d4b7956b35", "deprecated": false, "id": "CVE-2019-19923-134f638b", "target": { "file": "src/select.c", "function": "flattenSubquery" }, "signature_version": "v1" }, { "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "18104233075719913524635092338994927414", "231876987339024958742979482512986350232", "160277624447613318640615005514603846097", "8615964068487288384404672935273546870", "158745051547251140066162530979138522345", "183413588476470140403235573409063477251", "275703712529451719009097609695050452259" ] }, "source": "https://github.com/sqlite/sqlite/commit/396afe6f6aa90a31303c183e11b2b2d4b7956b35", "deprecated": false, "id": "CVE-2019-19923-5fb5e80f", "target": { "file": "src/select.c" }, "signature_version": "v1" } ] }