{"id":"CVE-2019-16228","details":"An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdb_env_open2 if mdb_env_read_header obtains a zero value for a certain size field. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.","aliases":["GHSA-ggwq-vrgp-6gv4","PYSEC-2019-240"],"modified":"2026-04-10T04:15:57.800192Z","published":"2019-09-11T15:15:11.577Z","related":["openSUSE-SU-2026:10430-1"],"references":[{"type":"EVIDENCE","url":"https://github.com/TeamSeri0us/pocs/tree/master/lmdb/FPE"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jnwatson/py-lmdb","events":[{"introduced":"0"},{"last_affected":"2765beed9c72816d6ff4aa42bb25aa293a4c915e"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"0.97"}]}}],"versions":["last-cython-version","py-lmdb_0.1","py-lmdb_0.2","py-lmdb_0.3","py-lmdb_0.4","py-lmdb_0.5","py-lmdb_0.51","py-lmdb_0.52","py-lmdb_0.53","py-lmdb_0.54","py-lmdb_0.56","py-lmdb_0.57","py-lmdb_0.58","py-lmdb_0.59","py-lmdb_0.60","py-lmdb_0.61","py-lmdb_0.62","py-lmdb_0.63","py-lmdb_0.64","py-lmdb_0.65","py-lmdb_0.66","py-lmdb_0.67","py-lmdb_0.68","py-lmdb_0.69","py-lmdb_0.70","py-lmdb_0.71","py-lmdb_0.72","py-lmdb_0.73","py-lmdb_0.74","py-lmdb_0.75","py-lmdb_0.76","py-lmdb_0.77","py-lmdb_0.79","py-lmdb_0.80","py-lmdb_0.81","py-lmdb_0.82","py-lmdb_0.83","py-lmdb_0.84","py-lmdb_0.85","py-lmdb_0.86","py-lmdb_0.87","py-lmdb_0.88","py-lmdb_0.89","py-lmdb_0.91","py-lmdb_0.92","py-lmdb_0.93","py-lmdb_0.94","py-lmdb_0.95","py-lmdb_0.96","py-lmdb_0.97"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-16228.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}