CVE-2026-11824 Details
Description
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.
A heap-based buffer overflow vulnerability has been identified in SQLite versions prior to 3.53.2, specifically within the FTS5 full-text search extension. This vulnerability allows attackers to cause a crash or execute arbitrary code by providing a crafted database that includes malicious continuation page metadata. The metadata can specify a szLeaf value smaller than 4, triggering an integer underflow in the fts5ChunkIterate() function. This underflow inflates the remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow with attacker-controlled data. The vulnerability is present in applications compiled with SQLITE_ENABLE_FTS5.
Users should upgrade to SQLite version 3.53.2 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 9, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://sqlite.org/releaselog/3_53_2.html | [email protected] | Release Notes |
| https://sqlite.org/src/info/061febcf41ca | [email protected] | Issue TrackingPatch |
| https://sqlite.org/src/info/4a5ad516ea93 | [email protected] | Issue TrackingPatch |
| https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-122 | Heap-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| sqlite sqlite | < 3.53.2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 11, 2026 | Initial Analysis | [email protected] |
| Jun 9, 2026 | New CVE Received | [email protected] |