Skip to main content
Apexward Pulse

Sqlite · Memory corruption

SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database…

CVE-2026-11822

What this means

This is rated medium severity (6.8 out of 10). There is no confirmed exploitation of it yet. Ask IT whether Sqlite Sqlite is in your estate.

Full vendor description

SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page. Attackers can set an oversized term length in the leaf page so that fts5LeafSeek() reads past the end of the page buffer while comparing terms during an FTS5 MATCH query, in applications compiled with SQLITE_ENABLE_FTS5.

Scoring and exploitation

6.8/ 10
CVSS 4.0 base scoreMedium

Exploitable only with local access without any account, but only if a user takes an action, such as opening a file or link. High impact on availability.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Exploitability

Longer bar: easier to attack

Attack vectorLocalAV:L
Attack complexityLowAC:L
Attack requirementsNoneAT:N
Privileges requiredNonePR:N
User interactionPassiveUI:P

Impact

Longer bar: more harm

ConfidentialityNoneVC:N
IntegrityNoneVI:N
AvailabilityHighVA:H
~0.2% estimated chance of attack in 30 daysModel estimate (): a probability signal, not confirmed exploitation
Exploited in the wild
Not confirmed in the
Not reported

Weaknesses

CWE-125

Affected products ()

  • Sqlite Sqlite
Show the raw CPE strings (1)
  • cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*

References

5 links from the CVE record, grouped by site.

Related feed events