CVE-2026-119373
HIGH
NVD
CVSS Score
7.8
Severity
HIGH
Published
Oct 30, 2026
Vendor
unknown
Description
SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process.