Heap-based Buffer Overflow in SQLite FTS5 Extension

CVE-2026-11824

What is CVE-2026-11824?

SQLite prior to version 3.53.2 is susceptible to a heap-based buffer overflow due to the faulty FTS5 full-text search extension. Malicious actors can exploit this vulnerability by crafting a specially-made database containing malicious continuation page metadata. This design flaw allows attackers to trigger an integer underflow during the FTS5 MATCH query processing via the fts5ChunkIterate() function. As a result, it can lead to buffering of attacker-controlled data, potentially resulting in application crashes or arbitrary code execution in systems with SQLITE_ENABLE_FTS5 compiled.

References