UBUNTU-CVE-2026-119374: Buffer Overflow
SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SQLiteto a version that resolves this vulnerability.Fixed in 3.54.0
Event History
Frequently Asked Questions
Which deployments are exposed?
The issue affects SQLite versions before 3.54.0 only when built with FTS5 support. Exploitation also depends on processing a database containing a corrupted FTS5 index while secure-delete is enabled.
What does an attacker need to do to trigger the flaw?
An attacker needs to supply a database file with crafted footer key offsets in a corrupted FTS5 index. A deletion operation against that database with secure-delete enabled can write past a leaf-page heap buffer.
Are default SQLite configurations known to be affected?
The available information does not state whether FTS5 or secure-delete is enabled by default in affected Ubuntu packages or application configurations. Verify both build-time FTS5 support and whether the application enables secure-delete.