CVE-2026-11822

The record

SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.

Affected packages

Related vulnerabilities

• CVE-2026-11824 SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5… Also affects sqlite3
• CVE-2025-70873 An information disclosure issue in the zipfileInflate function in the zipfile extension… Also affects sqlite3
• CVE-2025-6965 There exists a vulnerability in SQLite versions before 3.50.2 where the number of… Also affects sqlite3
• CVE-2022-46908 SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script… Also affects sqlite3
• CVE-2022-35737 SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if… Also affects sqlite3
• CVE-2026-112403 Pillow is a Python imaging library. CWE-122
• CVE-2026-112393 Pillow is a Python imaging library. CWE-122
• CVE-2026-112395 Pillow is a Python imaging library. CWE-122