{"id":"CVE-2026-119374","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-119374","summary":"SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()","details":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application.","published":"2026-10-30T11:30:39.834Z","modified":"2026-10-31T07:05:11.099937787Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":{"url":"https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9","label":"sqlite/sqlite@d9de6ee"},"references":[{"type":"ADVISORY","url":"https://abraxaslabs.tech/research/sqlite-fts5-securedel"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/119xxx/CVE-2026-119374.json"},{"type":"PACKAGE","url":"https://github.com/sqlite/sqlite"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525"},{"type":"FIX","url":"https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119374"},{"type":"WEB","url":"https://sqlite.org/"},{"type":"ADVISORY","url":"https://sqlite.org/releaselog/3_54_0.html"},{"type":"FIX","url":"https://sqlite.org/src/info/9cd4f9e920"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-31T07:05:11.099937787Z"}}