{"id":"CVE-2026-11824","revision":"a7698ccd954245c6872d722b1822f29c","records":[{"revision":"a7698ccd954245c6872d722b1822f29c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-11824","aliases":[],"title":"SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate","description":"SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.","state":0,"publishedAt":"2026-06-09T19:21:42.603+00:00","modifiedAt":"2026-10-15T01:12:18.879+00:00","affected":[{"ecosystem":"https://sqlite.org/","name":"SQLite","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"SQLite\",\n                    \"product\": \"SQLite\",\n                    \"platforms\": [\n                        \"All platforms where SQLITE_ENABLE_FTS5 is defined\"\n                    ],\n                    \"collectionURL\": \"https://sqlite.org/\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.53.2\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":8.5,"severity":"HIGH"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://sqlite.org/src/info/061febcf41ca","https://sqlite.org/src/info/4a5ad516ea93","https://sqlite.org/releaselog/3_53_2.html","https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-11824","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-11824","identifiers":["CVE-2026-11824"]},"retained":false,"historicalAffected":[]}],"coverage":[]}