CVE-2026-119372

Description

References

• abraxaslabs.tech/research/sqlite-fts3-snippet · Exploit
• sqlite/sqlite · Product
• sqlite/sqlite · Patch
• sqlite/sqlite commit a87bd24 · Patch
• sqlite.org/bugs/info/2026-08-17T09:18:24Z · Issue Tracking
• sqlite.org/releaselog/3_54_0.html · Release Notes
• sqlite.org/src/info/e4635c4153 · Patch
• vulncheck.com/advisories/sqlite-before-3.54.0-use-after-free-in-fts3-fts3bestsnippet-via-snippet · Third Party Advisory

Autres vulnérabilités de sqlite

• CVE-2026-119591MOYENNE 5.5SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process …
• CVE-2026-119586ÉLEVÉE 7.8SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-…
• CVE-2026-119379ÉLEVÉE 7.8SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows …
• CVE-2026-119378MOYENNE 5.5SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed he…
• CVE-2026-119377FAIBLE 3.3SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined ta…