Debian: DLA-2340-1 Critical: sqlite3 Buffer Overflow Threat

Databases whose schema is corrupted using a CREATE TABLE AS statement
could cause a NULL pointer dereference.

CVE-2018-20346

When the FTS3 extension is enabled, sqlite3 encounters an integer
overflow (and resultant buffer overflow) for FTS3 queries that occur
after crafted changes to FTS3 shadow tables, allowing remote
attackers to execute arbitrary code by leveraging the ability to run
arbitrary SQL statements.

CVE-2018-20506

When the FTS3 extension is enabled, sqlite3 encounters an integer
overflow (and resultant buffer overflow) for FTS3 queries in a
"merge" operation that occurs after crafted changes to FTS3 shadow
tables, allowing remote attackers to execute arbitrary code by
leveraging the ability to run arbitrary SQL statements

CVE-2019-5827

Integer overflow allowed a remote attacker to potentially exploit
heap corruption via a crafted HTML page, primarily impacting
chromium.

CVE-2019-9936