Skip to content
OpenAdvisories
High · 7.8 CVE-2026-11824 EUVD-2026-35801GHSA-8g48-4wfm-7247

SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate

Published Jun 9, 2026 · Updated Oct 15, 2026 · Assigned by VulnCheck

Description

SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.

Affected products

VendorProductAffectedFixed
SQLite SQLite < 3.53.2 3.53.2

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 sqlite3 3.53.2-1 —
Debian 13 sqlite3 3.46.1-7+deb13u2 —
Debian 12 sqlite3 No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS sqlite3 3.46.1-9ubuntu0.1 USN-8480-1
Ubuntu 25.10 sqlite3 3.46.1-8ubuntu0.1 USN-8480-1
Ubuntu 24.04 LTS sqlite3 3.45.1-1ubuntu2.6 USN-8480-1
Ubuntu 22.04 LTS sqlite No fix yet —
Ubuntu 22.04 LTS sqlite3 3.37.2-2ubuntu0.6 USN-8480-1
Ubuntu 20.04 LTS sqlite No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS sqlite No fix yet —
Ubuntu 16.04 LTS sqlite No fix yet —
Ubuntu 14.04 LTS sqlite No fix yet —
Ubuntu Pro 20.04 LTS sqlite3 No fix yet —
Ubuntu Pro 18.04 LTS sqlite3 No fix yet —
Ubuntu Pro 16.04 LTS sqlite3 No fix yet —
Ubuntu Pro 14.04 LTS sqlite3 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 10 sqlite +2 3.46.1-6.el10_2 RHSA-2026:58927
RHEL 9 nodejs +4 1:22.23.1-3.module+el9.8.0+24637+e0b636e5 RHSA-2026:55603, RHSA-2026:55601
RHEL 9 nodejs-nodemon 3.1.14-2.module+el9.8.0+24637+e0b636e5 RHSA-2026:55603, RHSA-2026:55601
RHEL 9 nodejs-packaging +1 2021.06-6.module+el9.8.0+24156+bb41d456 RHSA-2026:55603, RHSA-2026:55601
RHEL 9 npm 1:10.9.8-1.22.23.1.3.module+el9.8.0+24637+e0b636e5 RHSA-2026:55603, RHSA-2026:55601
RHEL 9 sqlite +2 3.34.1-11.el9_8 RHSA-2026:58936
RHEL 9 v8-12.4-devel 3:12.4.254.21-1.22.23.1.3.module+el9.8.0+24637+e0b636e5 RHSA-2026:55601
RHEL 9 v8-13.6-devel 3:13.6.233.17-1.24.18.0.6.module+el9.8.0+24638+75f46aee RHSA-2026:55603
RHEL 8 lemon +4 3.26.0-21.el8_10 RHSA-2026:58938
RHEL 8 nodejs +4 1:22.23.1-3.module+el8.10.0+24640+6eba5e6e RHSA-2026:54530, RHSA-2026:54371
RHEL 8 nodejs-nodemon 3.1.14-2.module+el8.10.0+24639+56878497 RHSA-2026:54530, RHSA-2026:54371
RHEL 8 nodejs-packaging +1 2021.06-6.module+el8.10.0+24500+8eb51621 RHSA-2026:54530, RHSA-2026:54371
RHEL 8 npm 1:10.9.8-1.22.23.1.3.module+el8.10.0+24640+6eba5e6e RHSA-2026:54530, RHSA-2026:54371
RHEL 8 v8-12.4-devel 3:12.4.254.21-1.22.23.1.3.module+el8.10.0+24640+6eba5e6e RHSA-2026:54530
RHEL 8 v8-13.6-devel 3:13.6.233.17-1.24.18.0.3.module+el8.10.0+24639+56878497 RHSA-2026:54371
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS sqlite +2 3.46.1-5.el10_0.1 RHSA-2026:61697
RHEL 9.6 EUS nodejs +4 1:22.23.2-1.module+el9.6.0+24769+299a7e3a RHSA-2026:62416
RHEL 9.6 EUS nodejs-nodemon 3.1.14-2.module+el9.6.0+24789+4011c12f RHSA-2026:62416
RHEL 9.6 EUS nodejs-packaging +1 2021.06-4.module+el9.6.0+23473+45664c2d RHSA-2026:62416
RHEL 9.6 EUS npm 1:10.9.8-1.22.23.2.1.module+el9.6.0+24769+299a7e3a RHSA-2026:62416
RHEL 9.6 EUS sqlite +2 3.34.1-8.el9_6.1 RHSA-2026:59956
RHEL 9.6 EUS v8-12.4-devel 3:12.4.254.21-1.22.23.2.1.module+el9.6.0+24769+299a7e3a RHSA-2026:62416
RHEL 9.4 E4S sqlite +2 3.34.1-7.el9_4.2 RHSA-2026:62236
RHEL 9.2 E4S sqlite +2 3.34.1-6.el9_2.3 RHSA-2026:62232
RHEL 8.8 TUS lemon +4 3.26.0-18.el8_8.3 RHSA-2026:58939
RHEL 8.8 E4S lemon +4 3.26.0-18.el8_8.3 RHSA-2026:58939
RHEL 8.6 EUS Long Life lemon +4 3.26.0-16.el8_6.4 RHSA-2026:59020
RHEL 8.6 AUS lemon +4 3.26.0-16.el8_6.4 RHSA-2026:59020
RHEL 8.4 EUS Long Life lemon +4 3.26.0-13.el8_4.2 RHSA-2026:59024
RHEL 8.4 AUS lemon +4 3.26.0-13.el8_4.2 RHSA-2026:59024
Red Hat Hardened Images 1 lemon +8 3.53.4-0.1.hum1 RHSA-2026:45779

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 sqlite +2 3.46.1-6.el10_2 ALSA-2026:58927
AlmaLinux 9 nodejs +4 1:22.23.1-3.module_el9.8.0+291+0bb98cce ALSA-2026:55603, ALSA-2026:55601
AlmaLinux 9 nodejs-nodemon 3.1.14-2.module_el9.8.0+291+0bb98cce ALSA-2026:55603, ALSA-2026:55601
AlmaLinux 9 nodejs-packaging +1 2021.06-6.module_el9.7.0+209+ecf6523e ALSA-2026:55603, ALSA-2026:55601
AlmaLinux 9 npm 1:10.9.8-1.22.23.1.3.module_el9.8.0+291+0bb98cce ALSA-2026:55603, ALSA-2026:55601
AlmaLinux 9 sqlite +2 3.34.1-11.el9_8 ALSA-2026:58936
AlmaLinux 9 v8-12.4-devel 3:12.4.254.21-1.22.23.1.3.module_el9.8.0+291+0bb98cce ALSA-2026:55601
AlmaLinux 9 v8-13.6-devel 3:13.6.233.17-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2 ALSA-2026:55603
AlmaLinux 8 lemon +4 3.26.0-21.el8_10 ALSA-2026:58938
AlmaLinux 8 nodejs +4 1:22.23.1-3.module_el8.10.0+4251+b427b8a5 ALSA-2026:54530, ALSA-2026:54371
AlmaLinux 8 nodejs-nodemon 3.1.14-2.module_el8.10.0+4250+09238ed4 ALSA-2026:54530, ALSA-2026:54371
AlmaLinux 8 nodejs-packaging +1 2021.06-6.module_el8.10.0+4086+70facd4a ALSA-2026:54530, ALSA-2026:54371
AlmaLinux 8 npm 1:10.9.8-1.22.23.1.3.module_el8.10.0+4251+b427b8a5 ALSA-2026:54530, ALSA-2026:54371
AlmaLinux 8 v8-12.4-devel 3:12.4.254.21-1.22.23.1.3.module_el8.10.0+4251+b427b8a5 ALSA-2026:54530
AlmaLinux 8 v8-13.6-devel 3:13.6.233.17-1.24.18.0.3.module_el8.10.0+4250+09238ed4 ALSA-2026:54371

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 sqlite 3.46.1-6.el10_2 RLSA-2026:58927
Rocky Linux 9 nodejs 1:22.23.1-3.module+el9.8.0+40280+057606e8 RLSA-2026:55603, RLSA-2026:55601
Rocky Linux 9 nodejs-nodemon 3.1.14-2.module+el9.8.0+40264+d9b257bb RLSA-2026:55603, RLSA-2026:55601
Rocky Linux 9 nodejs-packaging 2021.06-6.module+el9.7.0+40052+e32ea525 RLSA-2026:55603, RLSA-2026:55601
Rocky Linux 9 sqlite 3.34.1-11.el9_8 RLSA-2026:58936
Rocky Linux 8 nodejs 1:22.23.1-3.module+el8.10.0+40278+50b003a3 RLSA-2026:54530, RLSA-2026:54371
Rocky Linux 8 nodejs-nodemon 3.1.14-2.module+el8.10.0+40277+b1b3f89e RLSA-2026:54530, RLSA-2026:54371
Rocky Linux 8 nodejs-packaging 2021.06-6.module+el8.10.0+40048+6d99f608 RLSA-2026:54530, RLSA-2026:54371
Rocky Linux 8 sqlite 3.26.0-21.el8_10 RLSA-2026:58938
ReleasePackageFixed inAdvisory
SLES 15 SP7 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES 15 SP6 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES 15 SP5 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES 15 SP4 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES 12 SP5 sqlite3 3.53.2-9.50.1 SUSE-SU-2026:2527-1
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 sqlite3 3.53.2-160000.1.1 SUSE-SU-2026:22166-1
SLES for SAP 15 SP6 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES for SAP 15 SP5 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES for SAP 15 SP4 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLES 16.0 sqlite3 3.53.2-160000.1.1 SUSE-SU-2026:22166-1
SLE Micro 6.2 sqlite3 3.53.2-160000.1.1 SUSE-SU-2026:22218-1
SLE Micro 6.1 sqlite3 3.53.2-slfo.1.1_1.1 SUSE-SU-2026:22134-1
SLE Micro 6.0 sqlite3 3.53.2-1.1 SUSE-SU-2026:22104-1
SLE Micro 5.5 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLE Micro 5.4 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLE Micro 5.3 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLE HPC 15 SP5 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
SLE HPC 15 SP4 sqlite3 3.53.2-150000.3.42.1 SUSE-SU-2026:2528-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed sqlite3 3.53.2-2.1 openSUSE-SU-2026:11059-1
openSUSE Leap 16.0 sqlite3 3.53.2-160000.1.1 openSUSE-SU-2026:21090-1
ReleasePackageFixed inAdvisory
Alpine v3.23 sqlite 3.53.4-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 lemon +7 3.40.0-1.amzn2023.0.8 ALAS2023-2026-1903
Amazon Linux 2023 nodejs22 +4 1:22.23.1-1.amzn2023.0.1 ALAS2023-2026-1921
Amazon Linux 2023 nodejs22-npm 1:10.9.8-1.22.23.1.1.amzn2023.0.1 ALAS2023-2026-1921
Amazon Linux 2023 nodejs24 +4 1:24.18.0-1.amzn2023.0.1 ALAS2023-2026-1920
Amazon Linux 2023 nodejs24-npm 1:11.16.0-1.24.18.0.1.amzn2023.0.1 ALAS2023-2026-1920
Amazon Linux 2023 v8-12.4-devel 3:12.4.254.21-1.22.23.1.1.amzn2023.0.1 ALAS2023-2026-1921
Amazon Linux 2023 v8-13.6-devel 3:13.6.233.17-1.24.18.0.1.amzn2023.0.1 ALAS2023-2026-1920

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 sqlite 3.44.0-4 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 sqlite +2 3.46.1-6.el10_2 ELSA-2026-58927
Oracle Linux 9 nodejs +4 1:22.23.1-3.module+el9.8.0+90991+73acc950 ELSA-2026-55603, ELSA-2026-55601
Oracle Linux 9 nodejs-nodemon 3.1.14-2.module+el9.8.0+90991+73acc950 ELSA-2026-55603, ELSA-2026-55601
Oracle Linux 9 nodejs-packaging +1 2021.06-6.module+el9.8.0+90946+13dc792a ELSA-2026-55603, ELSA-2026-55601
Oracle Linux 9 npm 1:10.9.8-1.22.23.1.3.module+el9.8.0+90991+73acc950 ELSA-2026-55603, ELSA-2026-55601
Oracle Linux 9 sqlite +2 3.34.1-11.el9_8 ELSA-2026-58936
Oracle Linux 9 v8-12.4-devel 3:12.4.254.21-1.22.23.1.3.module+el9.8.0+90991+73acc950 ELSA-2026-55601
Oracle Linux 9 v8-13.6-devel 3:13.6.233.17-1.24.18.0.6.module+el9.8.0+90993+075b4fd6 ELSA-2026-55603
Oracle Linux 8 lemon +4 3.26.0-21.el8_10 ELSA-2026-58938
Oracle Linux 8 nodejs +4 1:22.23.1-3.module+el8.10.0+90989+141244df ELSA-2026-54530, ELSA-2026-54371
Oracle Linux 8 nodejs-nodemon 3.1.14-2.module+el8.10.0+90988+ddbb43dc ELSA-2026-54530, ELSA-2026-54371
Oracle Linux 8 nodejs-packaging +1 2021.06-4.module+el8.10.0+90968+e271b286 ELSA-2026-54530, ELSA-2026-54371
Oracle Linux 8 npm 1:10.9.8-1.22.23.1.3.module+el8.10.0+90989+141244df ELSA-2026-54530, ELSA-2026-54371
Oracle Linux 8 v8-12.4-devel 3:12.4.254.21-1.22.23.1.3.module+el8.10.0+90989+141244df ELSA-2026-54530
Oracle Linux 8 v8-13.6-devel 3:13.6.233.17-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc ELSA-2026-54371

Advisories 50

References