p PatchFirst

CVE-2026-11822

CVE-2026-11822 · SQLite before 3.53.2 Memory Corruption in FTS5 Extension

This page contains facts from public vulnerability sources. Check the original advisory before updating.

SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.

CVSS 8.5 · High · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • sqlite

    Versions
    • ≥ 0, < 3.53.2: Affected (custom)

    Update to 3.53.2

  • sqlite3 Debian:12

    Versions
    • 3.40.1-2
    • 3.40.1-2+deb12u1
    • 3.40.1-2+deb12u2
    • 3.42.0-1
    • 3.43.0-1
    • 3.43.1-1
    • 3.43.2-1
    • 3.44.0-1
    • 3.44.2-1
    • 3.45.0-1
    • 3.45.1-1
    • 3.45.2-1
    • 3.45.3-1
    • 3.45.3-2~exp1
    • 3.46.0-1
    • 3.46.1-1
    • 3.46.1-2
    • 3.46.1-2~exp
    • 3.46.1-3
    • 3.46.1-4
    • 3.46.1-5
    • 3.46.1-6
    • 3.46.1-7
    • 3.46.1-8
    • 3.46.1-9
    • 3.53.2-1
    • 3.53.3-1
    • 3.53.4-1
    • 3.53.4-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sqlite3 Debian:13

    Versions
    • 3.46.1-7
    • 3.46.1-7+deb13u1
    Affected ranges
    • ECOSYSTEM: < 3.46.1-7+deb13u2

    Update to 3.46.1-7+deb13u2

  • sqlite3 Debian:14

    Versions
    • 3.46.1-7
    • 3.46.1-8
    • 3.46.1-9
    Affected ranges
    • ECOSYSTEM: < 3.53.2-1

    Update to 3.53.2-1

  • sqlite Ubuntu:14.04:LTS

    Versions
    • 2.8.17-8fakesync1
    • 2.8.17-9fakesync1
    • 2.8.17-10ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sqlite3 Ubuntu:Pro:14.04:LTS

    Versions
    • 3.7.17-1ubuntu1
    • 3.8.0.2-1ubuntu1
    • 3.8.1-1ubuntu1
    • 3.8.1-1ubuntu3
    • 3.8.2-1ubuntu1
    • 3.8.2-1ubuntu2
    • 3.8.2-1ubuntu2.1
    • 3.8.2-1ubuntu2.2
    • 3.8.2-1ubuntu2.2+esm1
    • 3.8.2-1ubuntu2.2+esm2
    • 3.8.2-1ubuntu2.2+esm3
    • 3.8.2-1ubuntu2.2+esm4
    • 3.8.2-1ubuntu2.2+esm5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sqlite3 Ubuntu:Pro:16.04:LTS

    Versions
    • 3.8.11.1-1
    • 3.9.1-2
    • 3.9.2-1
    • 3.10.0-1
    • 3.10.1-1
    • 3.10.2-1
    • 3.11.0-1ubuntu1
    • 3.11.0-1ubuntu1.1
    • 3.11.0-1ubuntu1.2
    • 3.11.0-1ubuntu1.3
    • 3.11.0-1ubuntu1.4
    • 3.11.0-1ubuntu1.5
    • 3.11.0-1ubuntu1.5+esm1
    • 3.11.0-1ubuntu1.5+esm2
    • 3.11.0-1ubuntu1.5+esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sqlite Ubuntu:16.04:LTS

    Versions
    • 2.8.17-12fakesync1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sqlite3 Ubuntu:Pro:18.04:LTS

    Versions
    • 3.19.3-3
    • 3.20.1-2
    • 3.21.0-1
    • 3.22.0-1
    • 3.22.0-1ubuntu0.1
    • 3.22.0-1ubuntu0.2
    • 3.22.0-1ubuntu0.3
    • 3.22.0-1ubuntu0.4
    • 3.22.0-1ubuntu0.5
    • 3.22.0-1ubuntu0.6
    • 3.22.0-1ubuntu0.7
    • 3.22.0-1ubuntu0.7+esm1
    • 3.22.0-1ubuntu0.7+esm2
    • 3.22.0-1ubuntu0.7+esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sqlite Ubuntu:18.04:LTS

    Versions
    • 2.8.17-14fakesync1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sqlite3 Ubuntu:Pro:20.04:LTS

    Versions
    • 3.29.0-2
    • 3.30.1-1
    • 3.30.1-1ubuntu1
    • 3.31.1-1ubuntu1
    • 3.31.1-3
    • 3.31.1-4
    • 3.31.1-4ubuntu0.1
    • 3.31.1-4ubuntu0.2
    • 3.31.1-4ubuntu0.3
    • 3.31.1-4ubuntu0.4
    • 3.31.1-4ubuntu0.5
    • 3.31.1-4ubuntu0.6
    • 3.31.1-4ubuntu0.7
    • 3.31.1-4ubuntu0.7+esm1
    • 3.31.1-4ubuntu0.7+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sqlite Ubuntu:20.04:LTS

    Versions
    • 2.8.17-15fakesync1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sqlite Ubuntu:22.04:LTS

    Versions
    • 2.8.17-15fakesync1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sqlite3 Ubuntu:22.04:LTS

    Versions
    • 3.35.5-1
    • 3.36.0-2
    • 3.37.2-2
    • 3.37.2-2ubuntu0.1
    • 3.37.2-2ubuntu0.3
    • 3.37.2-2ubuntu0.4
    • 3.37.2-2ubuntu0.5
    Affected ranges
    • ECOSYSTEM: < 3.37.2-2ubuntu0.6

    Update to 3.37.2-2ubuntu0.6

  • sqlite3 Ubuntu:24.04:LTS

    Versions
    • 3.42.0-1
    • 3.44.0-1
    • 3.44.2-1
    • 3.45.0-1
    • 3.45.1-1
    • 3.45.1-1ubuntu1
    • 3.45.1-1ubuntu2
    • 3.45.1-1ubuntu2.1
    • 3.45.1-1ubuntu2.3
    • 3.45.1-1ubuntu2.4
    • 3.45.1-1ubuntu2.5
    Affected ranges
    • ECOSYSTEM: < 3.45.1-1ubuntu2.6

    Update to 3.45.1-1ubuntu2.6

  • sqlite3 Ubuntu:25.10

    Versions
    • 3.46.1-3
    • 3.46.1-4
    • 3.46.1-6
    • 3.46.1-6ubuntu1
    • 3.46.1-7
    • 3.46.1-7build1
    • 3.46.1-8
    Affected ranges
    • ECOSYSTEM: < 3.46.1-8ubuntu0.1

    Update to 3.46.1-8ubuntu0.1

  • sqlite3 Ubuntu:26.04:LTS

    Versions
    • 3.46.1-8
    • 3.46.1-9
    Affected ranges
    • ECOSYSTEM: < 3.46.1-9ubuntu0.1

    Update to 3.46.1-9ubuntu0.1

Original sources

Check your server →