6 matches found
CVE-2026-119372
SQLite before 3.54.0 built with FTS3/FTS4 and SQLITEENABLEFTS3PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet caused by dangling cached position-list pointers. Attackers can run a full-text MATCH query combining OR and NEAR operators with snippet to read freed heap memory a...
CVE-2026-119372
Versions of SQLite prior to 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS are vulnerable to a Use-After-Free flaw in fts3BestSnippet(). The root cause is dangling cached position-list pointers triggered when executing a full-text MATCH query that combines OR and NEAR operators wi...
CVE-2026-119372 SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()
SQLite before 3.54.0 built with FTS3/FTS4 and SQLITEENABLEFTS3PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet caused by dangling cached position-list pointers. Attackers can run a full-text MATCH query combining OR and NEAR operators with snippet to read freed heap memory a...
EUVD-2026-113783
SQLite before 3.54.0 built with FTS3/FTS4 and SQLITEENABLEFTS3PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet caused by dangling cached position-list pointers. Attackers can run a full-text MATCH query combining OR and NEAR operators with snippet to read freed heap memory a...
CVE-2026-119372 SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()
SQLite before 3.54.0 built with FTS3/FTS4 and SQLITEENABLEFTS3PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet caused by dangling cached position-list pointers. Attackers can run a full-text MATCH query combining OR and NEAR operators with snippet to read freed heap memory a...
PT-2026-133456
SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE ENABLE FTS3 PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet caused by dangling cached position-list pointers. Attackers can run a full-text MATCH query combining OR and NEAR operators with snippet to read freed heap memor...