UBUNTU-CVE-2026-11822: SQL Injection

Q: Which applications are exposed to this issue?

Applications using SQLite versions before 3.53.2 are exposed only if they are compiled with SQLITE_ENABLE_FTS5 and execute FTS5 MATCH queries against an affected database.

Q: What does an attacker need to do to trigger the crash?

The attacker needs to supply a crafted database containing a malformed FTS5 leaf page with an oversized term length. The out-of-bounds read occurs when SQLite compares terms during an FTS5 MATCH query.

Q: What is the immediate mitigation if upgrading is not possible?

Avoid opening or querying untrusted SQLite databases with FTS5 MATCH queries in applications built with SQLITE_ENABLE_FTS5. Upgrade SQLite to version 3.53.2 or later when possible.

Published Jun 9, 2026

Updated

SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page. Attackers can set an oversized term length in the leaf page so that fts5LeafSeek() reads past the end of the page buffer while comparing terms during an FTS5 MATCH query, in applications compiled with SQLITEENABLEFTS5.

Affected Software

13 affected componentsFixes available

ubuntu/sqlite*

ubuntu/sqlite3*

ubuntu/sqlite*

ubuntu/sqlite3*

ubuntu/sqlite*

ubuntu/sqlite3*

ubuntu/sqlite*

ubuntu/sqlite3<3.37.2-2ubuntu0.6

3.37.2-2ubuntu0.6

ubuntu/sqlite3<3.45.1-1ubuntu2.6

3.45.1-1ubuntu2.6

ubuntu/sqlite3<3.46.1-8ubuntu0.1

3.46.1-8ubuntu0.1

ubuntu/sqlite3<3.46.1-9ubuntu0.1

3.46.1-9ubuntu0.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/sqlite3 to a version that resolves this vulnerability.
Fixed in 3.37.2-2ubuntu0.6
Upgrade
Upgrade ubuntu/sqlite3 to a version that resolves this vulnerability.
Fixed in 3.45.1-1ubuntu2.6
Upgrade
Upgrade ubuntu/sqlite3 to a version that resolves this vulnerability.
Fixed in 3.46.1-8ubuntu0.1
Upgrade
Upgrade ubuntu/sqlite3 to a version that resolves this vulnerability.
Fixed in 3.46.1-9ubuntu0.1
Upgrade
Upgrade SQLite to a version that resolves this vulnerability.
Fixed in 3.53.2

Event History

Jun 9, 2026

CVE Published

via OSV·08:16 PM

Data Sourced

via OSV·08:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which applications are exposed to this issue?

Applications using SQLite versions before 3.53.2 are exposed only if they are compiled with SQLITE_ENABLE_FTS5 and execute FTS5 MATCH queries against an affected database.

What does an attacker need to do to trigger the crash?

The attacker needs to supply a crafted database containing a malformed FTS5 leaf page with an oversized term length. The out-of-bounds read occurs when SQLite compares terms during an FTS5 MATCH query.

What is the immediate mitigation if upgrading is not possible?

Avoid opening or querying untrusted SQLite databases with FTS5 MATCH queries in applications built with SQLITE_ENABLE_FTS5. Upgrade SQLite to version 3.53.2 or later when possible.

UBUNTU-CVE-2026-11822: SQL Injection

Affected Software

Remediation

Event History

Frequently Asked Questions

Which applications are exposed to this issue?

What does an attacker need to do to trigger the crash?

What is the immediate mitigation if upgrading is not possible?

Company

Resources

Contact

Frequently Asked Questions

Which applications are exposed to this issue?

What does an attacker need to do to trigger the crash?

What is the immediate mitigation if upgrading is not possible?