Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-17 | 1 | Disclosure1 |
| 2026-06-18 | 1 | Patch1 |
🛡️ SQLite3 no #SUSE: duas vulnerabilidades críticas no FTS5 (CVE-2026-11822 e CVE-2026-11824) foram corrigidas. Saiba mais: -> http://tinyurl.com/2wyu89a4 https://t.co/dhQRRtEjsC
Post summary
SUSE announced that two critical SQLite3 FTS5 vulnerabilities (CVE‑2026‑11822 and CVE‑2026‑11824) have been patched, with a link to the vendor advisory.
SUSE sqlite2/sqlite3 FTS5 bugs CVE-2026-11822 and CVE-2026-11824 allow memory corruption and possible arbitrary code execution. - Affects SUSE systems shipping sqlite for software that enables the FTS5 full text extension. #Ransomware #InfoSec https://t.co/AeEXm5kBtR
Post summary
Two new CVEs impacting SUSE’s SQLite FTS5 extension are disclosed, indicating memory corruption that could enable arbitrary code execution.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | sqlite | sqlite | - | - | - |