CVE-2026-11822

概要

参考情報

• sqlite.org/releaselog/3_53_2.html · Release Notes
• sqlite.org/src/info/87b653731171
• sqlite.org/src/info/fad98805b7d7
• vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension · Third Party Advisory
• cert-portal.siemens.com/productcert/html/ssa-765416.html

sqlite のその他の脆弱性

• CVE-2026-11824高 7.8SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cau…
• CVE-2025-70873高 7.5An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to ob…
• CVE-2025-7458緊急 9.1An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability …
• CVE-2025-6965高 7.7There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns availab…
• CVE-2025-3277緊急 9.8An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer.…