Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-11822 EUVD-2026-35794GHSA-6qj8-gw6p-hc5p

SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek

Published Jun 9, 2026 · Updated Oct 30, 2026 · Assigned by VulnCheck

Description

SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page. Attackers can set an oversized term length in the leaf page so that fts5LeafSeek() reads past the end of the page buffer while comparing terms during an FTS5 MATCH query, in applications compiled with SQLITE_ENABLE_FTS5.

Affected products

VendorProductAffectedFixed
SQLite SQLite < 3.53.2 3.53.2

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 sqlite3 3.53.2-1 —
Debian 13 sqlite3 3.46.1-7+deb13u2 —
Debian 12 sqlite3 No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS sqlite3 3.46.1-9ubuntu0.1 USN-8480-1
Ubuntu 25.10 sqlite3 3.46.1-8ubuntu0.1 USN-8480-1
Ubuntu 24.04 LTS sqlite3 3.45.1-1ubuntu2.6 USN-8480-1
Ubuntu 22.04 LTS sqlite No fix yet —
Ubuntu 22.04 LTS sqlite3 3.37.2-2ubuntu0.6 USN-8480-1
Ubuntu 20.04 LTS sqlite No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS sqlite No fix yet —
Ubuntu 16.04 LTS sqlite No fix yet —
Ubuntu 14.04 LTS sqlite No fix yet —
Ubuntu Pro 20.04 LTS sqlite3 No fix yet —
Ubuntu Pro 18.04 LTS sqlite3 No fix yet —
Ubuntu Pro 16.04 LTS sqlite3 No fix yet —
Ubuntu Pro 14.04 LTS sqlite3 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 10 sqlite +2 3.46.1-6.el10_2 RHSA-2026:58927
RHEL 9 nodejs +4 1:22.23.1-3.module+el9.8.0+24637+e0b636e5 RHSA-2026:55603, RHSA-2026:55601
RHEL 9 nodejs-nodemon 3.1.14-2.module+el9.8.0+24637+e0b636e5 RHSA-2026:55603, RHSA-2026:55601
RHEL 9 nodejs-packaging +1 2021.06-6.module+el9.8.0+24156+bb41d456 RHSA-2026:55603, RHSA-2026:55601
RHEL 9 npm 1:10.9.8-1.22.23.1.3.module+el9.8.0+24637+e0b636e5 RHSA-2026:55603, RHSA-2026:55601
RHEL 9 sqlite +2 3.34.1-11.el9_8 RHSA-2026:58936
RHEL 9 v8-12.4-devel 3:12.4.254.21-1.22.23.1.3.module+el9.8.0+24637+e0b636e5 RHSA-2026:55601
RHEL 9 v8-13.6-devel 3:13.6.233.17-1.24.18.0.6.module+el9.8.0+24638+75f46aee RHSA-2026:55603
RHEL 8 lemon +4 3.26.0-21.el8_10 RHSA-2026:58938
RHEL 8 mingw-sqlite +4 3.26.0.0-3.el8_10 RHSA-2026:61242
RHEL 8 nodejs +4 1:22.23.1-3.module+el8.10.0+24640+6eba5e6e RHSA-2026:54530, RHSA-2026:54371
RHEL 8 nodejs-nodemon 3.1.14-2.module+el8.10.0+24639+56878497 RHSA-2026:54530, RHSA-2026:54371
RHEL 8 nodejs-packaging +1 2021.06-6.module+el8.10.0+24500+8eb51621 RHSA-2026:54530, RHSA-2026:54371
RHEL 8 npm 1:10.9.8-1.22.23.1.3.module+el8.10.0+24640+6eba5e6e RHSA-2026:54530, RHSA-2026:54371
RHEL 8 v8-12.4-devel 3:12.4.254.21-1.22.23.1.3.module+el8.10.0+24640+6eba5e6e RHSA-2026:54530
RHEL 8 v8-13.6-devel 3:13.6.233.17-1.24.18.0.3.module+el8.10.0+24639+56878497 RHSA-2026:54371
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS sqlite +2 3.46.1-5.el10_0.1 RHSA-2026:61697
RHEL 9.6 EUS nodejs +4 1:22.23.2-1.module+el9.6.0+24769+299a7e3a RHSA-2026:62416
RHEL 9.6 EUS nodejs-nodemon 3.1.14-2.module+el9.6.0+24789+4011c12f RHSA-2026:62416
RHEL 9.6 EUS nodejs-packaging +1 2021.06-4.module+el9.6.0+23473+45664c2d RHSA-2026:62416
RHEL 9.6 EUS npm 1:10.9.8-1.22.23.2.1.module+el9.6.0+24769+299a7e3a RHSA-2026:62416
RHEL 9.6 EUS sqlite +2 3.34.1-8.el9_6.1 RHSA-2026:59956
RHEL 9.6 EUS v8-12.4-devel 3:12.4.254.21-1.22.23.2.1.module+el9.6.0+24769+299a7e3a RHSA-2026:62416
RHEL 9.4 E4S sqlite +2 3.34.1-7.el9_4.2 RHSA-2026:62236
RHEL 9.2 E4S sqlite +2 3.34.1-6.el9_2.3 RHSA-2026:62232
RHEL 8.8 TUS lemon +4 3.26.0-18.el8_8.3 RHSA-2026:58939
RHEL 8.8 E4S lemon +4 3.26.0-18.el8_8.3 RHSA-2026:58939
RHEL 8.6 EUS Long Life lemon +4 3.26.0-16.el8_6.4 RHSA-2026:59020
RHEL 8.6 AUS lemon +4 3.26.0-16.el8_6.4 RHSA-2026:59020
RHEL 8.4 EUS Long Life lemon +4 3.26.0-13.el8_4.2 RHSA-2026:59024
RHEL 8.4 AUS lemon +4 3.26.0-13.el8_4.2 RHSA-2026:59024
Red Hat Hardened Images 1 lemon +8 3.53.4-0.1.hum1 RHSA-2026:45779

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 sqlite +2 3.46.1-6.el10_2 ALSA-2026:58927
AlmaLinux 9 nodejs +4 1:22.23.1-3.module_el9.8.0+291+0bb98cce ALSA-2026:55603, ALSA-2026:55601
AlmaLinux 9 nodejs-nodemon 3.1.14-2.module_el9.8.0+291+0bb98cce ALSA-2026:55603, ALSA-2026:55601
AlmaLinux 9 nodejs-packaging +1 2021.06-6.module_el9.7.0+209+ecf6523e ALSA-2026:55603, ALSA-2026:55601
AlmaLinux 9 npm 1:10.9.8-1.22.23.1.3.module_el9.8.0+291+0bb98cce ALSA-2026:55603, ALSA-2026:55601
AlmaLinux 9 sqlite +2 3.34.1-11.el9_8 ALSA-2026:58936
AlmaLinux 9 v8-12.4-devel 3:12.4.254.21-1.22.23.1.3.module_el9.8.0+291+0bb98cce ALSA-2026:55601
AlmaLinux 9 v8-13.6-devel 3:13.6.233.17-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2 ALSA-2026:55603
AlmaLinux 8 lemon +4 3.26.0-21.el8_10 ALSA-2026:58938
AlmaLinux 8 mingw32-sqlite +3 3.26.0.0-3.el8_10 ALSA-2026:61242
AlmaLinux 8 nodejs +4 1:22.23.1-3.module_el8.10.0+4251+b427b8a5 ALSA-2026:54530, ALSA-2026:54371
AlmaLinux 8 nodejs-nodemon 3.1.14-2.module_el8.10.0+4250+09238ed4 ALSA-2026:54530, ALSA-2026:54371
AlmaLinux 8 nodejs-packaging +1 2021.06-6.module_el8.10.0+4086+70facd4a ALSA-2026:54530, ALSA-2026:54371
AlmaLinux 8 npm 1:10.9.8-1.22.23.1.3.module_el8.10.0+4251+b427b8a5 ALSA-2026:54530, ALSA-2026:54371
AlmaLinux 8 v8-12.4-devel 3:12.4.254.21-1.22.23.1.3.module_el8.10.0+4251+b427b8a5 ALSA-2026:54530
AlmaLinux 8 v8-13.6-devel 3:13.6.233.17-1.24.18.0.3.module_el8.10.0+4250+09238ed4 ALSA-2026:54371

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 sqlite 3.46.1-6.el10_2 RLSA-2026:58927
Rocky Linux 9 nodejs 1:22.23.1-3.module+el9.8.0+40280+057606e8 RLSA-2026:55603, RLSA-2026:55601
Rocky Linux 9 nodejs-nodemon 3.1.14-2.module+el9.8.0+40264+d9b257bb RLSA-2026:55603, RLSA-2026:55601
Rocky Linux 9 nodejs-packaging 2021.06-6.module+el9.7.0+40052+e32ea525 RLSA-2026:55603, RLSA-2026:55601
Rocky Linux 9 sqlite 3.34.1-11.el9_8 RLSA-2026:58936
Rocky Linux 8 mingw-sqlite 3.26.0.0-3.el8_10 RLSA-2026:61242
Rocky Linux 8 nodejs 1:22.23.1-3.module+el8.10.0+40278+50b003a3 RLSA-2026:54530, RLSA-2026:54371
Rocky Linux 8 nodejs-nodemon 3.1.14-2.module+el8.10.0+40277+b1b3f89e RLSA-2026:54530, RLSA-2026:54371
Rocky Linux 8 nodejs-packaging 2021.06-6.module+el8.10.0+40048+6d99f608 RLSA-2026:54530, RLSA-2026:54371
Rocky Linux 8 sqlite 3.26.0-21.el8_10 RLSA-2026:58938
ReleasePackageFixed inAdvisory
SLES 15 SP7 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES 15 SP6 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES 15 SP5 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES 15 SP4 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES 12 SP5 sqlite3 3.53.2-9.50.1 SUSE-SU-2026:2527-1
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 sqlite3 3.53.2-160000.1.1 SUSE-SU-2026:22166-1
SLES for SAP 15 SP6 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES for SAP 15 SP5 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES for SAP 15 SP4 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES 16.0 sqlite3 3.53.2-160000.1.1 SUSE-SU-2026:22166-1
SLE Micro 6.2 sqlite3 3.53.2-160000.1.1 SUSE-SU-2026:22218-1
SLE Micro 6.1 sqlite3 3.53.2-slfo.1.1_1.1 SUSE-SU-2026:22134-1
SLE Micro 6.0 sqlite3 3.53.2-1.1 SUSE-SU-2026:22104-1
SLE Micro 5.5 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLE Micro 5.4 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLE Micro 5.3 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLE HPC 15 SP5 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLE HPC 15 SP4 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed sqlite3 3.53.2-2.1 openSUSE-SU-2026:11059-1
openSUSE Leap 16.0 sqlite3 3.53.2-160000.1.1 openSUSE-SU-2026:21090-1
ReleasePackageFixed inAdvisory
Alpine v3.23 sqlite 3.53.4-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 lemon +7 3.40.0-1.amzn2023.0.8 ALAS2023-2026-1903
Amazon Linux 2023 nodejs22 +4 1:22.23.1-1.amzn2023.0.1 ALAS2023-2026-1921
Amazon Linux 2023 nodejs22-npm 1:10.9.8-1.22.23.1.1.amzn2023.0.1 ALAS2023-2026-1921
Amazon Linux 2023 nodejs24 +4 1:24.18.0-1.amzn2023.0.1 ALAS2023-2026-1920
Amazon Linux 2023 nodejs24-npm 1:11.16.0-1.24.18.0.1.amzn2023.0.1 ALAS2023-2026-1920
Amazon Linux 2023 v8-12.4-devel 3:12.4.254.21-1.22.23.1.1.amzn2023.0.1 ALAS2023-2026-1921
Amazon Linux 2023 v8-13.6-devel 3:13.6.233.17-1.24.18.0.1.amzn2023.0.1 ALAS2023-2026-1920

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 sqlite 3.44.0-4 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 sqlite +2 3.46.1-6.el10_2 ELSA-2026-58927
Oracle Linux 9 nodejs +4 1:22.23.1-3.module+el9.8.0+90991+73acc950 ELSA-2026-55603, ELSA-2026-55601
Oracle Linux 9 nodejs-nodemon 3.1.14-2.module+el9.8.0+90991+73acc950 ELSA-2026-55603, ELSA-2026-55601
Oracle Linux 9 nodejs-packaging +1 2021.06-6.module+el9.8.0+90946+13dc792a ELSA-2026-55603, ELSA-2026-55601
Oracle Linux 9 npm 1:10.9.8-1.22.23.1.3.module+el9.8.0+90991+73acc950 ELSA-2026-55603, ELSA-2026-55601
Oracle Linux 9 sqlite +2 3.34.1-11.el9_8 ELSA-2026-58936
Oracle Linux 9 v8-12.4-devel 3:12.4.254.21-1.22.23.1.3.module+el9.8.0+90991+73acc950 ELSA-2026-55601
Oracle Linux 9 v8-13.6-devel 3:13.6.233.17-1.24.18.0.6.module+el9.8.0+90993+075b4fd6 ELSA-2026-55603
Oracle Linux 8 lemon +4 3.26.0-21.el8_10 ELSA-2026-58938
Oracle Linux 8 nodejs +4 1:22.23.1-3.module+el8.10.0+90989+141244df ELSA-2026-54530, ELSA-2026-54371
Oracle Linux 8 nodejs-nodemon 3.1.14-2.module+el8.10.0+90988+ddbb43dc ELSA-2026-54530, ELSA-2026-54371
Oracle Linux 8 nodejs-packaging +1 2021.06-4.module+el8.10.0+90968+e271b286 ELSA-2026-54530, ELSA-2026-54371
Oracle Linux 8 npm 1:10.9.8-1.22.23.1.3.module+el8.10.0+90989+141244df ELSA-2026-54530, ELSA-2026-54371
Oracle Linux 8 v8-12.4-devel 3:12.4.254.21-1.22.23.1.3.module+el8.10.0+90989+141244df ELSA-2026-54530
Oracle Linux 8 v8-13.6-devel 3:13.6.233.17-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc ELSA-2026-54371

Advisories 50

References