CVE catalog

CVE-2026-11822

SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by

[CVE catalog]

Severity
High · CVSS 8.5CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published
Source
[NVD] · [CVE record]
EPSS
0.36% · Oct 25, 2026

SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansqlite3sid3.53.4-2fixed
Debiansqlite3forky3.53.4-2fixed
Debiansqlite3trixie3.46.1-7+deb13u2fixed
Debiansqlite3bookworm3.40.1-2+deb12u2vulnerable
Cpesqlite3Not reported3.45.1-1ubuntu2.6fixed
CpelemonNot reported3.45.1-1ubuntu2.6fixed
Cpelibsqlite3-0Not reported3.45.1-1ubuntu2.6fixed
Cpelibsqlite3-devNot reported3.45.1-1ubuntu2.6fixed
Cpelibsqlite3-tclNot reported3.45.1-1ubuntu2.6fixed
Cpesqlite3-docNot reported3.45.1-1ubuntu2.6fixed
Cpesqlite3-toolsNot reported3.45.1-1ubuntu2.6fixed
Cpesqlite3Not reportedNot reportedvulnerable
CpesqliteNot reported3.53.2fixed
CpesqliteNot reported3.53.2fixed
Alpinesqlite3.233.53.4-r0fixed
Ubuntusqlite14.042.8.17-8fakesync1vulnerable
Ubuntusqlite14.042.8.17-9fakesync1vulnerable
Ubuntusqlite14.042.8.17-10ubuntu2vulnerable
Ubuntusqlite3pro3.29.0-2vulnerable
Ubuntusqlite3pro3.30.1-1vulnerable
Ubuntusqlite3pro3.30.1-1ubuntu1vulnerable
Ubuntusqlite3pro3.31.1-1ubuntu1vulnerable
Ubuntusqlite3pro3.31.1-3vulnerable
Ubuntusqlite3pro3.31.1-4vulnerable
Ubuntusqlite3pro3.31.1-4ubuntu0.1vulnerable
Ubuntusqlite3pro3.31.1-4ubuntu0.2vulnerable
Ubuntusqlite3pro3.31.1-4ubuntu0.3vulnerable
Ubuntusqlite3pro3.31.1-4ubuntu0.4vulnerable
Ubuntusqlite3pro3.31.1-4ubuntu0.5vulnerable
Ubuntusqlite3pro3.31.1-4ubuntu0.6vulnerable
Ubuntusqlite3pro3.31.1-4ubuntu0.7vulnerable
Ubuntusqlite3pro3.31.1-4ubuntu0.7+esm1vulnerable
Ubuntusqlite3pro3.31.1-4ubuntu0.7+esm2vulnerable
Ubuntusqlite16.042.8.17-12fakesync1vulnerable
Ubuntusqlite18.042.8.17-14fakesync1vulnerable
Ubuntusqlite20.042.8.17-15fakesync1build1vulnerable
Ubuntusqlite22.042.8.17-15fakesync1build1vulnerable
Ubuntusqlite322.043.35.5-1vulnerable
Ubuntusqlite322.043.36.0-2vulnerable
Ubuntusqlite322.043.37.2-2vulnerable
Ubuntusqlite322.043.37.2-2ubuntu0.1vulnerable
Ubuntusqlite322.043.37.2-2ubuntu0.3vulnerable
Ubuntusqlite322.043.37.2-2ubuntu0.4vulnerable
Ubuntusqlite322.043.37.2-2ubuntu0.5vulnerable
Ubuntusqlite322.043.37.2-2ubuntu0.6fixed
Ubuntusqlite324.043.42.0-1vulnerable
Ubuntusqlite324.043.44.0-1vulnerable
Ubuntusqlite324.043.44.2-1vulnerable
Ubuntusqlite324.043.45.0-1vulnerable
Ubuntusqlite324.043.45.1-1vulnerable
Ubuntusqlite324.043.45.1-1ubuntu1vulnerable
Ubuntusqlite324.043.45.1-1ubuntu2vulnerable
Ubuntusqlite324.043.45.1-1ubuntu2.1vulnerable
Ubuntusqlite324.043.45.1-1ubuntu2.3vulnerable
Ubuntusqlite324.043.45.1-1ubuntu2.4vulnerable
Ubuntusqlite324.043.45.1-1ubuntu2.5vulnerable
Ubuntusqlite324.043.45.1-1ubuntu2.6fixed
Ubuntusqlite325.103.46.1-3vulnerable
Ubuntusqlite325.103.46.1-4vulnerable
Ubuntusqlite325.103.46.1-6vulnerable
Ubuntusqlite325.103.46.1-6ubuntu1vulnerable
Ubuntusqlite325.103.46.1-7vulnerable
Ubuntusqlite325.103.46.1-7build1vulnerable
Ubuntusqlite325.103.46.1-8vulnerable
Ubuntusqlite325.103.46.1-8ubuntu0.1fixed
Ubuntusqlite326.043.46.1-8vulnerable
Ubuntusqlite326.043.46.1-9vulnerable
Ubuntusqlite326.043.46.1-9ubuntu0.1fixed
Opensusesqlite3leap 16.03.53.2-160000.1.1fixed
Ubuntusqlite322.043.35.5-1vulnerable
Ubuntusqlite322.043.36.0-2vulnerable
Ubuntusqlite322.043.37.2-2vulnerable
Ubuntusqlite322.043.37.2-2ubuntu0.1vulnerable
Ubuntusqlite322.043.37.2-2ubuntu0.3vulnerable
Ubuntusqlite322.043.37.2-2ubuntu0.4vulnerable
Ubuntusqlite322.043.37.2-2ubuntu0.5vulnerable
Ubuntusqlite322.043.37.2-2ubuntu0.6fixed
Ubuntusqlite324.043.42.0-1vulnerable
Ubuntusqlite324.043.44.0-1vulnerable
Ubuntusqlite324.043.44.2-1vulnerable
Ubuntusqlite324.043.45.0-1vulnerable
Ubuntusqlite324.043.45.1-1vulnerable
Ubuntusqlite324.043.45.1-1ubuntu1vulnerable
Ubuntusqlite324.043.45.1-1ubuntu2vulnerable
Ubuntusqlite324.043.45.1-1ubuntu2.1vulnerable
Ubuntusqlite324.043.45.1-1ubuntu2.3vulnerable
Ubuntusqlite324.043.45.1-1ubuntu2.4vulnerable
Ubuntusqlite324.043.45.1-1ubuntu2.5vulnerable
Ubuntusqlite324.043.45.1-1ubuntu2.6fixed
Ubuntusqlite325.103.46.1-3vulnerable
Ubuntusqlite325.103.46.1-4vulnerable
Ubuntusqlite325.103.46.1-6vulnerable
Ubuntusqlite325.103.46.1-6ubuntu1vulnerable
Ubuntusqlite325.103.46.1-7vulnerable
Ubuntusqlite325.103.46.1-7build1vulnerable
Ubuntusqlite325.103.46.1-8vulnerable
Ubuntusqlite325.103.46.1-8ubuntu0.1fixed
Ubuntusqlite326.043.46.1-8vulnerable
Ubuntusqlite326.043.46.1-9vulnerable
Ubuntusqlite326.043.46.1-9ubuntu0.1fixed
Susesqlite3linux micro 6.23.53.2-160000.1.1fixed
Susesqlite3linux enterprise server 16.03.53.2-160000.1.1fixed
Susesqlite3linux enterprise server for sap applications 16.03.53.2-160000.1.1fixed
Susesqlite3linux enterprise server 12 sp5-ltss3.53.2-9.50.1fixed
Susesqlite3linux enterprise server ltss extended security 12 sp53.53.2-9.50.1fixed
Susesqlite3linux enterprise micro 5.33.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise micro 5.43.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise micro 5.53.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise module for basesystem 15 sp73.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise high performance computing 15 sp4-espos3.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise high performance computing 15 sp4-ltss3.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise high performance computing 15 sp5-espos3.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise high performance computing 15 sp5-ltss3.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise server 15 sp4-ltss3.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise server 15 sp5-ltss3.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise server 15 sp6-ltss3.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise server for sap applications 15 sp43.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise server for sap applications 15 sp53.53.2-150000.3.42.1fixed
Susesqlite3linux enterprise server for sap applications 15 sp63.53.2-150000.3.42.1fixed
Opensusesqlite3tumbleweed3.53.2-2.1fixed
Susesqlite3linux micro 6.13.53.2-slfo.1.1_1.1fixed
Susesqlite3linux micro 6.03.53.2-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansqlite3sourcesid3.53.2-1not yet assignedNot reported[1139960]
Debiansqlite3sourceforky3.53.2-1not yet assignedNot reported[1139960]
Debiansqlite3sourcetrixie3.46.1-7+deb13u2not yet assignedNot reported[1139960]
Debiansqlite3sourcebookworm(unfixed)not yet assignedNot reported[1139960]
Cpesqlite3cpeNot reported3.45.1-1ubuntu2.6Not reportedNot reportedNot reported
CpelemoncpeNot reported3.45.1-1ubuntu2.6Not reportedNot reportedNot reported
Cpelibsqlite3-0cpeNot reported3.45.1-1ubuntu2.6Not reportedNot reportedNot reported
Cpelibsqlite3-devcpeNot reported3.45.1-1ubuntu2.6Not reportedNot reportedNot reported
Cpelibsqlite3-tclcpeNot reported3.45.1-1ubuntu2.6Not reportedNot reportedNot reported
Cpesqlite3-doccpeNot reported3.45.1-1ubuntu2.6Not reportedNot reportedNot reported
Cpesqlite3-toolscpeNot reported3.45.1-1ubuntu2.6Not reportedNot reportedNot reported
CpesqlitecpeNot reported3.53.2Not reportedNot reportedNot reported
CpesqlitecpeNot reported3.53.2Not reportedNVD-CVE-2026-11822Not reported
Alpinesqliteapk3.233.53.4-r0Not reportedALPINE-CVE-2026-11822Not reported
Ubuntusqlite3deb22.043.37.2-2ubuntu0.6Not reportedUBUNTU-CVE-2026-11822Not reported
Ubuntusqlite3deb24.043.45.1-1ubuntu2.6Not reportedUBUNTU-CVE-2026-11822Not reported
Ubuntusqlite3deb25.103.46.1-8ubuntu0.1Not reportedUBUNTU-CVE-2026-11822Not reported
Ubuntusqlite3deb26.043.46.1-9ubuntu0.1Not reportedUBUNTU-CVE-2026-11822Not reported
Opensusesqlite3rpmleap 16.03.53.2-160000.1.1Not reportedOPENSUSE-SU-2026:21090-1Not reported
Ubuntusqlite3deb22.043.37.2-2ubuntu0.6Not reportedUSN-8480-1Not reported
Ubuntusqlite3deb24.043.45.1-1ubuntu2.6Not reportedUSN-8480-1Not reported
Ubuntusqlite3deb25.103.46.1-8ubuntu0.1Not reportedUSN-8480-1Not reported
Ubuntusqlite3deb26.043.46.1-9ubuntu0.1Not reportedUSN-8480-1Not reported
Susesqlite3rpmlinux micro 6.23.53.2-160000.1.1Not reportedSUSE-SU-2026:22218-1Not reported
Susesqlite3rpmlinux enterprise server 16.03.53.2-160000.1.1Not reportedSUSE-SU-2026:22166-1Not reported
Susesqlite3rpmlinux enterprise server for sap applications 16.03.53.2-160000.1.1Not reportedSUSE-SU-2026:22166-1Not reported
Susesqlite3rpmlinux enterprise server 12 sp5-ltss3.53.2-9.50.1Not reportedSUSE-SU-2026:2527-1Not reported
Susesqlite3rpmlinux enterprise server ltss extended security 12 sp53.53.2-9.50.1Not reportedSUSE-SU-2026:2527-1Not reported
Susesqlite3rpmlinux enterprise micro 5.33.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise micro 5.43.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise micro 5.53.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise module for basesystem 15 sp73.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise high performance computing 15 sp4-espos3.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise high performance computing 15 sp4-ltss3.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise high performance computing 15 sp5-espos3.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise high performance computing 15 sp5-ltss3.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise server 15 sp4-ltss3.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise server 15 sp5-ltss3.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise server 15 sp6-ltss3.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise server for sap applications 15 sp43.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise server for sap applications 15 sp53.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Susesqlite3rpmlinux enterprise server for sap applications 15 sp63.53.2-150000.3.42.1Not reportedSUSE-SU-2026:2528-1Not reported
Opensusesqlite3rpmtumbleweed3.53.2-2.1Not reportedOPENSUSE-SU-2026:11059-1Not reported
Susesqlite3rpmlinux micro 6.13.53.2-slfo.1.1_1.1Not reportedSUSE-SU-2026:22134-1Not reported
Susesqlite3rpmlinux micro 6.03.53.2-1.1Not reportedSUSE-SU-2026:22104-1Not reported

[Debian bug #1139960]

Notes

[bookworm] sqlite3: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [lemon]Affected

    Source package: [sqlite3]

    Details (2)
    • 3.40.1-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

    • 3.40.1-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

  • [libsqlite3-0]Affected

    Source package: [sqlite3]

    Details (2)
    • 3.40.1-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

    • 3.40.1-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

  • [libsqlite3-dev]Affected

    Source package: [sqlite3]

    Details (2)
    • 3.40.1-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

    • 3.40.1-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

  • [libsqlite3-tcl]Affected

    Source package: [sqlite3]

    Details (2)
    • 3.40.1-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

    • 3.40.1-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

  • [sqlite3]Affected
    Details (2)
    • 3.40.1-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

    • 3.40.1-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

  • [sqlite3-doc]Affected

    Source package: [sqlite3]

    Details (2)
    • 3.40.1-2+deb12u2 · all · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

    • 3.40.1-2+deb12u2 · all · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

  • [sqlite3-tools]Affected

    Source package: [sqlite3]

    Details (2)
    • 3.40.1-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

    • 3.40.1-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · sqlite3 · debian · bookworm

[openSUSE Tumbleweed]

  • [lemon]Unknown

    Source package: [sqlite3]

    Details (1)
    • 3.53.2-3.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.53.2-2.1

      Version impact unknown

      nvd · sqlite3 · opensuse · tumbleweed

  • [libsqlite3-0]Unknown

    Source package: [sqlite3]

    Details (1)
    • 3.53.2-3.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.53.2-2.1

      Version impact unknown

      nvd · sqlite3 · opensuse · tumbleweed

  • Source package: [sqlite3]

    Details (1)
    • 3.53.2-3.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.53.2-2.1

      Version impact unknown

      nvd · sqlite3 · opensuse · tumbleweed

  • Source package: [sqlite3]

    Details (1)
    • 3.53.2-3.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.53.2-2.1

      Version impact unknown

      nvd · sqlite3 · opensuse · tumbleweed

  • [sqlite3-devel]Unknown

    Source package: [sqlite3]

    Details (1)
    • 3.53.2-3.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.53.2-2.1

      Version impact unknown

      nvd · sqlite3 · opensuse · tumbleweed

  • [sqlite3-doc]Unknown

    Source package: [sqlite3]

    Details (1)
    • 3.53.2-3.2 · noarch · tumbleweed

      Unknown · Fixed: 3.53.2-2.1

      Version impact unknown

      nvd · sqlite3 · opensuse · tumbleweed

  • [sqlite3-tcl]Unknown

    Source package: [sqlite3]

    Details (1)
    • 3.53.2-3.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.53.2-2.1

      Version impact unknown

      nvd · sqlite3 · opensuse · tumbleweed

  • [sqlite3-tools]Unknown

    Source package: [sqlite3]

    Details (1)
    • 3.53.2-3.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.53.2-2.1

      Version impact unknown

      nvd · sqlite3 · opensuse · tumbleweed

  • Source package: [sqlite3]

    Details (1)
    • 3.53.2-3.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.53.2-2.1

      Version impact unknown

      nvd · sqlite3 · opensuse · tumbleweed

  • [sqlite3]Fixed

    Source package: [sqlite3]

    Details (1)
    • 3.53.2-3.2 · x86_64 · tumbleweed

      Fixed · Fixed: 3.53.2-2.1

      nvd · sqlite3 · opensuse · tumbleweed

Observed:

References