CVE-2026-11822

Name
CVE-2026-11822
Description
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
disclosure@vulncheck.com https://sqlite.org/releaselog/3_53_2.html
disclosure@vulncheck.com https://sqlite.org/src/info/061febcf41ca
disclosure@vulncheck.com https://sqlite.org/src/info/4a5ad516ea93
disclosure@vulncheck.com https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:* sqlite >= None < 3.53.2

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
sqlite edge-main 3.53.1-r0 Jingyun Hua <huajingyun@loongson.cn> possibly vulnerable
sqlite edge-main 3.53.0-r0 Jingyun Hua <huajingyun@loongson.cn> possibly vulnerable
sqlite edge-main 3.51.2-r1 Jingyun Hua <huajingyun@loongson.cn> possibly vulnerable
sqlite edge-main 3.51.2-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.51.1-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.51.0-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.50.4-r1 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.50.4-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.50.3-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.50.2-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.50.1-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.50.0-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.49.2-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.49.1-r1 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.49.1-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.49.0-r1 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.49.0-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.48.0-r1 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.48.0-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.47.2-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.47.1-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite edge-main 3.36.0-r0 Carlo Landmeter <clandmeter@alpinelinux.org> possibly vulnerable
sqlite edge-main 3.34.1-r0 None possibly vulnerable
sqlite edge-main 3.32.1-r0 None possibly vulnerable
sqlite edge-main 3.30.1-r3 None possibly vulnerable
sqlite edge-main 3.30.1-r1 None possibly vulnerable
sqlite edge-main 3.28.0-r0 None possibly vulnerable
sqlite 3.23-main 3.51.2-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.23-main 3.51.1-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.22-main 3.49.2-r1 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.22-main 3.49.2-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.22-main 3.34.1-r0 None possibly vulnerable
sqlite 3.22-main 3.32.1-r0 None possibly vulnerable
sqlite 3.22-main 3.30.1-r3 None possibly vulnerable
sqlite 3.22-main 3.30.1-r1 None possibly vulnerable
sqlite 3.22-main 3.28.0-r0 None possibly vulnerable
sqlite 3.21-main 3.48.0-r4 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.21-main 3.48.0-r3 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.21-main 3.48.0-r2 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.21-main 3.48.0-r1 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.21-main 3.48.0-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.21-main 3.47.1-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.21-main 3.34.1-r0 None possibly vulnerable
sqlite 3.21-main 3.32.1-r0 None possibly vulnerable
sqlite 3.21-main 3.30.1-r3 None possibly vulnerable
sqlite 3.21-main 3.30.1-r1 None possibly vulnerable
sqlite 3.21-main 3.28.0-r0 None possibly vulnerable
sqlite 3.20-main 3.45.3-r3 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.20-main 3.45.3-r2 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.20-main 3.45.3-r1 Celeste <cielesti@protonmail.com> possibly vulnerable
sqlite 3.20-main 3.34.1-r0 None possibly vulnerable
sqlite 3.20-main 3.32.1-r0 None possibly vulnerable
sqlite 3.20-main 3.30.1-r3 None possibly vulnerable
sqlite 3.20-main 3.30.1-r1 None possibly vulnerable
sqlite 3.20-main 3.28.0-r0 None possibly vulnerable
sqlite 3.19-main 3.44.2-r2 Carlo Landmeter <clandmeter@alpinelinux.org> possibly vulnerable
sqlite 3.19-main 3.44.2-r1 Carlo Landmeter <clandmeter@alpinelinux.org> possibly vulnerable
sqlite 3.19-main 3.44.2-r0 Carlo Landmeter <clandmeter@alpinelinux.org> possibly vulnerable
sqlite 3.19-main 3.34.1-r0 None possibly vulnerable
sqlite 3.19-main 3.32.1-r0 None possibly vulnerable
sqlite 3.19-main 3.30.1-r3 None possibly vulnerable
sqlite 3.19-main 3.30.1-r1 None possibly vulnerable
sqlite 3.19-main 3.28.0-r0 None possibly vulnerable