CVE-2026-11824— SQLite 安全漏洞

SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate

SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

堆缓冲区溢出

SQLite 安全漏洞

SQLite是SQLite开源的一款轻型的数据库，是遵守ACID的关系型数据库管理系统。 SQLite 3.53.2之前版本存在安全漏洞，该漏洞源于FTS5全文搜索扩展中的堆缓冲区溢出问题，可能导致攻击者通过提供带有恶意延续页面元数据的特制数据库造成崩溃或执行任意代码。以下版本受到影响：3.53.2之前版本。

N/A

N/A