CVE-2026-11824

EUVD-2026-35801

09.06.2026, 20:16

SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.8 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 7%

Affected Products (NVD)

Vendor	Product	Version
sqlite	sqlite	𝑥 < 3.53.2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

sqlite3

bookworm	postponed
bullseye	postponed
bullseye (security)	vulnerable
forky	3.53.3-1 fixed
sid	3.53.3-1 fixed
trixie	no-dsa

openSUSE / SLES Releases

openSUSE Product

Release

libsqlite3-0

suse enterprise desktop 15 SP7	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP4	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP5	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP6	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP7	3.53.2-150000.3.42.1 fixed
suse enterprise server 12 SP3	3.53.2-9.50.1 fixed
suse enterprise server 12 SP5	3.53.2-9.50.1 fixed
suse enterprise server 15 SP4	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP5	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP6	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP7	3.53.2-150000.3.42.1 fixed

libsqlite3-0-32bit

suse enterprise desktop 15 SP7	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP4	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP5	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP6	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP7	3.53.2-150000.3.42.1 fixed
suse enterprise server 12 SP3	3.53.2-9.50.1 fixed
suse enterprise server 12 SP5	3.53.2-9.50.1 fixed
suse enterprise server 15 SP4	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP5	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP6	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP7	3.53.2-150000.3.42.1 fixed

sqlite3

suse enterprise desktop 15 SP7	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP4	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP5	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP6	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP7	3.53.2-150000.3.42.1 fixed
suse enterprise server 12 SP3	3.53.2-9.50.1 fixed
suse enterprise server 12 SP5	3.53.2-9.50.1 fixed
suse enterprise server 15 SP4	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP5	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP6	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP7	3.53.2-150000.3.42.1 fixed

sqlite3-devel

suse enterprise desktop 15 SP7	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP4	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP5	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP6	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP7	3.53.2-150000.3.42.1 fixed
suse enterprise server 12 SP3	3.53.2-9.50.1 fixed
suse enterprise server 12 SP5	3.53.2-9.50.1 fixed
suse enterprise server 15 SP4	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP5	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP6	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP7	3.53.2-150000.3.42.1 fixed

sqlite3-tcl

suse enterprise desktop 15 SP7	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP4	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP5	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP6	3.53.2-150000.3.42.1 fixed
suse enterprise sap 15 SP7	3.53.2-150000.3.42.1 fixed
suse enterprise server 12 SP3	3.53.2-9.50.1 fixed
suse enterprise server 12 SP5	3.53.2-9.50.1 fixed
suse enterprise server 15 SP4	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP5	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP6	3.53.2-150000.3.42.1 fixed
suse enterprise server 15 SP7	3.53.2-150000.3.42.1 fixed

Amazon Linux Releases

Amazon Package

Release

lemon

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

lemon-debuginfo

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

nodejs22

Amazon Linux 2023

1:22.23.1-1.amzn2023.0.1

fixed

nodejs22-debuginfo

Amazon Linux 2023

1:22.23.1-1.amzn2023.0.1

fixed

nodejs22-debugsource

Amazon Linux 2023

1:22.23.1-1.amzn2023.0.1

fixed

nodejs22-devel

Amazon Linux 2023

1:22.23.1-1.amzn2023.0.1

fixed

nodejs22-docs

Amazon Linux 2023

1:22.23.1-1.amzn2023.0.1

fixed

nodejs22-full-i18n

Amazon Linux 2023

1:22.23.1-1.amzn2023.0.1

fixed

nodejs22-libs

Amazon Linux 2023

1:22.23.1-1.amzn2023.0.1

fixed

nodejs22-libs-debuginfo

Amazon Linux 2023

1:22.23.1-1.amzn2023.0.1

fixed

nodejs22-npm

Amazon Linux 2023

1:10.9.8-1.22.23.1.1.amzn2023.0.1

fixed

nodejs24

Amazon Linux 2023

1:24.18.0-1.amzn2023.0.1

fixed

nodejs24-debuginfo

Amazon Linux 2023

1:24.18.0-1.amzn2023.0.1

fixed

nodejs24-debugsource

Amazon Linux 2023

1:24.18.0-1.amzn2023.0.1

fixed

nodejs24-devel

Amazon Linux 2023

1:24.18.0-1.amzn2023.0.1

fixed

nodejs24-docs

Amazon Linux 2023

1:24.18.0-1.amzn2023.0.1

fixed

nodejs24-full-i18n

Amazon Linux 2023

1:24.18.0-1.amzn2023.0.1

fixed

nodejs24-libs

Amazon Linux 2023

1:24.18.0-1.amzn2023.0.1

fixed

nodejs24-libs-debuginfo

Amazon Linux 2023

1:24.18.0-1.amzn2023.0.1

fixed

nodejs24-npm

Amazon Linux 2023

1:11.16.0-1.24.18.0.1.amzn2023.0.1

fixed

sqlite

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

sqlite-analyzer

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

sqlite-analyzer-debuginfo

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

sqlite-debuginfo

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

sqlite-debugsource

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

sqlite-devel

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

sqlite-doc

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

sqlite-libs

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

sqlite-libs-debuginfo

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

sqlite-tcl

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

sqlite-tcl-debuginfo

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

sqlite-tools

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

sqlite-tools-debuginfo

Amazon Linux 2023

0:3.40.0-1.amzn2023.0.8

fixed

v8-12.4-devel

Amazon Linux 2023

3:12.4.254.21-1.22.23.1.1.amzn2023.0.1

fixed

v8-13.6-devel

Amazon Linux 2023

3:13.6.233.17-1.24.18.0.1.amzn2023.0.1

fixed

Azure Linux Releases

Azure Package

Release

sqlite

Azure Linux 3.0

0:3.44.0-4.azl3

fixed

Common Weakness Enumeration

CWE-122 - Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References

https://sqlite.org/releaselog/3_53_2.html

https://sqlite.org/src/info/061febcf41ca

https://sqlite.org/src/info/4a5ad516ea93

https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate