SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://sqlite.org/src/info/061febcf41ca Issue Tracking, Patch
- https://sqlite.org/src/info/4a5ad516ea93 Issue Tracking, Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.5 · sqliteNVD modified 2026-10-15 02:18
Affected (CPE criteria) 1
cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*
References 5
- https://sqlite.org/releaselog/3_53_2.html Release Notes
- https://sqlite.org/src/info/061febcf41ca Issue Tracking, Patch
- https://sqlite.org/src/info/4a5ad516ea93 Issue Tracking, Patch
- https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-765416.html