HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-11822 — SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full...

·Source: NIST NVD

Updated:

Executive Summary

SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5

Analysis

SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database. CVSS Score: 7.8. Published: 2026-06-09T20:16:32.150.

Indicators of Compromise (1)

CVE (1)
CVE-2026-11822
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jun 9, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

Siemens RUGGEDCOM CROSSBOW Station Access Controller

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-15.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information

CVE-2025-6965CVE-2025-70873
CISA Advisories
MEDIUMVulnerability

CISO Problems That Can't Be Solved With Technology

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ciso-problems-that-cant-be-solved-technology-image_small-4-a-33248.jpg" align=right hspace=4><b>Operational Struggles and Arrogant Vendors Mean Tool Churn Is Likely to Continue</b><br>No matter how advanced or powerful cybersecurity tools become, they will never be able to fix many of the key problems that confront cyber defenders

Bank Info Security
LOWAi

Fake Anthropic AI previews lure in overeager employees

Everyone wants to know what Anthropic is up to, and hackers are gleefully exploiting the fact. New research from cybersecurity company Cofense describes a phishing campaign that hooks overeager enterprise users by making them think they are getting an invite to a private invite-only Anthropic preview. In reality, adversarial actors are trying to steal Google and Microsoft login credentials, exploi

CSO Online