lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-19317
• sqlite/sqlite@522ebfa
• sqlite/sqlite@73bacb7
• https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
• https://security.netapp.com/advisory/ntap-20191223-0001/
• https://www.oracle.com/security-alerts/cpuapr2020.html