{"id":"CVE-2026-11822","revision":"939f7c5ee9a54d0f8bf93347ebf90d56","records":[{"revision":"939f7c5ee9a54d0f8bf93347ebf90d56","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-11822","aliases":[],"title":"SQLite before 3.53.2 Memory Corruption in FTS5 Extension","description":"SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.","state":0,"publishedAt":"2026-06-09T19:08:31.019+00:00","modifiedAt":"2026-10-15T01:12:17.694+00:00","affected":[{"ecosystem":"https://sqlite.org/","name":"SQLite","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"SQLite\",\n                    \"product\": \"SQLite\",\n                    \"platforms\": [\n                        \"All platforms where SQLITE_ENABLE_FTS5 is defined\"\n                    ],\n                    \"collectionURL\": \"https://sqlite.org/\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.53.2\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"},{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":8.5,"severity":"HIGH"}],"references":["https://sqlite.org/src/info/061febcf41ca","https://sqlite.org/src/info/4a5ad516ea93","https://sqlite.org/releaselog/3_53_2.html","https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-11822","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-11822","identifiers":["CVE-2026-11822"]},"retained":false,"historicalAffected":[]}],"coverage":[]}