AZL-111766: CVE-2026-119372 affecting package sqlite 3.44.0-4

Q: Which deployments are exposed to this issue?

Only SQLite builds that include FTS3 or FTS4 and are compiled with SQLITE_ENABLE_FTS3_PARENTHESIS are described as affected. The vulnerable code path also requires use of full-text search queries and the snippet() function.

Q: What must an attacker be able to do to trigger the vulnerability?

An attacker needs to execute a full-text MATCH query that combines OR and NEAR operators with snippet(). Successful exploitation can read freed heap memory and crash the SQLite process.

Q: How can I determine whether my SQLite build is affected?

Check whether the SQLite version is earlier than 3.54.0 and whether it was built with FTS3/FTS4 plus SQLITE_ENABLE_FTS3_PARENTHESIS. Then determine whether the application permits the relevant MATCH query pattern and snippet() usage.

Published Oct 30, 2026

Updated

SQLite before 3.54.0 built with FTS3/FTS4 and SQLITEENABLEFTS3PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet() caused by dangling cached position-list pointers. Attackers can run a full-text MATCH query combining OR and NEAR operators with snippet() to read freed heap memory and crash the process.

Affected Software

1 affected component

azure-linux/sqlite<=3.44.0-4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade sqlite to a version that resolves this vulnerability.
Fixed in 3.54.0

Event History

Oct 30, 2026

Advisory Published

via OSV·12:16 PM

Data Sourced

via OSV·12:16 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-119372

Frequently Asked Questions

Which deployments are exposed to this issue?

Only SQLite builds that include FTS3 or FTS4 and are compiled with SQLITE_ENABLE_FTS3_PARENTHESIS are described as affected. The vulnerable code path also requires use of full-text search queries and the snippet() function.

What must an attacker be able to do to trigger the vulnerability?

An attacker needs to execute a full-text MATCH query that combines OR and NEAR operators with snippet(). Successful exploitation can read freed heap memory and crash the SQLite process.

How can I determine whether my SQLite build is affected?

Check whether the SQLite version is earlier than 3.54.0 and whether it was built with FTS3/FTS4 plus SQLITE_ENABLE_FTS3_PARENTHESIS. Then determine whether the application permits the relevant MATCH query pattern and snippet() usage.

AZL-111766: CVE-2026-119372 affecting package sqlite 3.44.0-4

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which deployments are exposed to this issue?

What must an attacker be able to do to trigger the vulnerability?

How can I determine whether my SQLite build is affected?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What must an attacker be able to do to trigger the vulnerability?

How can I determine whether my SQLite build is affected?