CVE-2019-19880 on Ubuntu 18.04 LTS (bionic) - medium.
Description:
exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.