Поиск уязвимостей

SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page. Attackers can set an oversized term length in the leaf page so that fts5LeafSeek() reads past the end of the page buffer while comparing terms during an FTS5 MATCH query, in applications compiled with SQLITE_ENABLE_FTS5.

SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.

SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page. Attackers can set an oversized term length in the leaf page so that fts5LeafSeek() reads past the end of the page buffer while comparing terms during an FTS5 MATCH query, in applications compiled with SQLITE_ENABLE_FTS5.

SQLite before 3.53.2 Memory Corruption in FTS5 Extension

SQLite before 3.53.2 contains an out-of-bounds read vulnerability in t ...

SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.

ELSA-2026-61242-0: mingw-sqlite security update (IMPORTANT)

Security update for sqlite3

Security update for sqlite3

Security update for sqlite3

Important: sqlite security update

Important: sqlite security update

Important: sqlite security update

ELSA-2026-58938: sqlite security update (IMPORTANT)

ELSA-2026-58936: sqlite security update (IMPORTANT)

ELSA-2026-58927: sqlite security update (IMPORTANT)

ALT-PU-2026-12856: package `sqlite3` update to version 3.53.3-alt1

Important: nodejs:22 security update

Important: nodejs:22 security update

ELSA-2026-55601: nodejs:22 security update (IMPORTANT)