SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application.

Etkilenen sürümler1 yazılım

Kaynaklar9 kaynak

• CVE.org kaydı
• NVD kaydı
• sqlite.org/src/info/9cd4f9e920 Yama
• github.com/…ommit/d9de6eedbe918c074c7556400fa21df5960704d9 Yama
• abraxaslabs.tech/research/sqlite-fts5-securedel Üçüncü taraf
• vulncheck.com/…ap-buffer-overflow-via-fts5-fts5dosecuredelete Üçüncü taraf
• github.com/…lite/blob/version-3.53.4/ext/fts5/fts5_index.c Diğer
• sqlite.org/releaselog/3_54_0.html Diğer
• github.com/sqlite/sqlite Diğer

Kayıt geçmişi

1. 30 Eki 2026 14:30Yayımlandı

İlgili açıklar

• 7,8 CVE-2026-119586SQLite CLI through 3.54.1 Command Injection via .recover Output
• 5,5 CVE-2026-119591SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause
• 7,8 CVE-2026-119379SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()
• 5,5 CVE-2026-119378SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()
• 5,5 CVE-2026-119376SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain
• 2,5 CVE-2026-119377SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING