SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.

Multiple Vulnerabilities in SQLite

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8480-1 advisory.

    It was discovered that SQLite incorrectly handled certain memory operations in the FTS5 full-text search     extension. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or     possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2528-1 advisory.

    This update for sqlite3 fixes the following issues

    Update to 3.53.2:

    - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow     attackers to cause       process crashes, memory exhaustion, or arbitrary code execution (bsc#1268012).
    - CVE-2026-11824: heap-based buffer overflow vulnerability in the FTS5 full-text search extension that     allows attackers       to cause a crash or execute arbitrary code (bsc#1268013).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2527-1 advisory.

    This update for sqlite3 fixes the following issues

    Update to 3.53.2:

    - CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow     attackers to cause       process crashes, memory exhaustion, or arbitrary code execution (bsc#1268012).
    - CVE-2026-11824: heap-based buffer overflow vulnerability in the FTS5 full-text search extension that     allows attackers       to cause a crash or execute arbitrary code (bsc#1268013).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the sqlite package has been released.

The version of SQLite installed on the remote host is prior to 3.53.2. It is, therefore, affected by multiple vulnerabilities:

  - A heap-based buffer overflow vulnerability in the FTS5 full-text search extension     allows attackers to cause a crash or execute arbitrary code by supplying a crafted     database with malicious continuation page metadata specifying a szLeaf value smaller     than 4. An integer underflow in fts5ChunkIterate() causes an inflated remaining byte     count during FTS5 MATCH query processing, leading to a heap buffer overflow of     attacker-controlled data. (CVE-2026-11824)

  - Memory corruption vulnerabilities in the FTS5 full-text search extension allow     attackers to cause process crashes, memory exhaustion, or arbitrary code execution by     supplying a crafted database with malformed FTS5 page data. An out-of-bounds read in     fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write     in fts5ChunkIterate() through a crafted continuation page causing an integer underflow     are exploitable when an FTS5 MATCH query is executed against the malicious database.
    (CVE-2026-11822)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search     extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database     with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger     an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH     query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled     with SQLITE_ENABLE_FTS5. (CVE-2026-11824)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
323913	Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : SQLite vulnerabilities (USN-8480-1)	Nessus	Ubuntu Local Security Checks	high
323077	SUSE SLED15: libsqlite3-0 / libsqlite3-0-32bit / sqlite3 / sqlite3-devel / etc (SUSE-SU-2026:2528-1)	Nessus	SuSE Local Security Checks	high
323037	SUSE SLES12: libsqlite3-0 / libsqlite3-0-32bit / sqlite3 / sqlite3-devel / etc (SUSE-SU-2026:2527-1)	Nessus	SuSE Local Security Checks	high
321833	Photon OS 5.0: Sqlite PHSA-2026-5.0-0889	Nessus	PhotonOS Local Security Checks	high
321188	SQLite < 3.53.2 Multiple Heap Buffer Overflows	Nessus	Misc.	high
320801	Linux Distros Unpatched Vulnerability : CVE-2026-11824	Nessus	Misc.	high

Detections

Analytics

CVE-2026-11824

high

Tenable Plugins

Coming Soon

high

high

high

high

high

high