Read the docs
TI-2026-10207 Aliases CVE-2026-11824GHSA-8g48-4wfm-7247

SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate

Priority LOW 38CWE-122Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 51 fixed, 6 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-122 and the CVSS impact.

Summary

SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00182 7th percentileScored 2026-11-07
Fix Partial SQLite (SQLite): 3.53.2Red Hat: 98 advisoriesRed Hat: 51 fixed, 6 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SQLiteSQLitebefore 3.53.23.53.2Patch availableCNA
  • SQLite VendorSQLite Affected before 3.53.2 Fixed in 3.53.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*before 3.53.2VulnerableSQLite
  • cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:* Versions before 3.53.2 Vulnerable ·SQLite

Remediation

  • Fix · CNA SQLite (SQLite) Fixed in 3.53.2

Red Hat 98 advisories

  • RHSA-2026:92510 Released 2026-10-29 · Red Hat rating Critical
    RHOAI 3.4.6 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:92452 Released 2026-10-29 · Red Hat rating Critical
    Red Hat Enterprise Linux AI 3.5.2 enhancement update
    • Red Hat Enterprise Linux AI 3.5 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
  • RHSA-2026:92449 Released 2026-10-29 · Red Hat rating Critical
    Red Hat Enterprise Linux AI 3.5.2 enhancement update
    • Red Hat Enterprise Linux AI 3.5 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
Show 95 more Red Hat advisories
  • RHSA-2026:82811 Released 2026-10-22 · Red Hat rating Important
    OpenShift Container Platform 4.15.70 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202610081130-0, rhcos-ppc64le-415.92.202610081130-0, rhcos-s390x-415.92.202610081130-0 +1
  • RHSA-2026:87410 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 2.25.12 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
  • RHSA-2026:84734 Released 2026-10-19 · Red Hat rating Critical
    RHOAI 3.4.5 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
  • RHSA-2026:82888 Released 2026-10-14 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-bundle
  • RHSA-2026:82857 Released 2026-10-14 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-bundle
  • RHSA-2026:82415 Released 2026-10-13 · Red Hat rating Critical
    Red Hat AI Inference 3.5.2 (cpu)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-cpu-rhel9
  • RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82371 Released 2026-10-13 · Red Hat rating Critical
    Red Hat AI Inference 3.5.2 (spyre)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-spyre-rhel9
  • RHSA-2026:82368 Released 2026-10-13 · Red Hat rating Critical
    Red Hat AI Inference 3.5.2 (cuda)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-cuda-rhel9
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:82336 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.1
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82322 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:82066 Released 2026-10-13 · Red Hat rating Important
    Red Hat AI Inference Model Optimization Tools 3.5.2 (CUDA)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/model-opt-cuda-rhel9
  • RHSA-2026:82061 Released 2026-10-13 · Red Hat rating Critical
    Red Hat AI Inference Tech Preview 3.5.2 (Gaudi)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-gaudi-rhel9
  • RHSA-2026:82059 Released 2026-10-13 · Red Hat rating Critical
    Red Hat AI Inference 3.5.2 (ROCm)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-rocm-rhel9
  • RHSA-2026:81127 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.3.5 (CUDA 12.9)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:80756 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.3.5 (CUDA 13.0)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:73866 Released 2026-10-08 · Red Hat rating Important
    OpenShift Container Platform 4.14.75 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202609282130-0, rhcos-ppc64le-414.92.202609282130-0, rhcos-s390x-414.92.202609282130-0 +1
  • RHSA-2026:76043 Released 2026-10-05 · Red Hat rating Important
    Red Hat Enterprise Linux AI 3.3.7 security update
    • Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
  • RHSA-2026:76041 Released 2026-10-05 · Red Hat rating Important
    Red Hat Enterprise Linux AI 3.3.7 security update
    • Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
  • RHSA-2026:74688 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (ROCm 6.4)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:74687 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (ROCm 7.1)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
  • RHSA-2026:74685 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (CUDA 12.9)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:74683 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (CUDA 13.0)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:74681 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (Spyre)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:74679 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (CPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:74678 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (Gaudi)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:74677 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (TPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:74674 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (Neuron)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:70586 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.17.58 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 rhcos-aarch64-417.94.202609191027-0, rhcos-ppc64le-417.94.202609191027-0, rhcos-s390x-417.94.202609191027-0 +1
  • RHSA-2026:74463 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.2.3 (ROCm 7.0)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:74462 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.2.3 (CUDA 12.9)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:74461 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.2.3 (Spyre)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:74460 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.2.3 (CPU)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:74459 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.2.3 (ROCm 6.4)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:74458 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.2.3 (TPU)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:74450 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.3.4 (Neuron)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:74365 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.3.4 (Spyre)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:74364 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.3.4 (CUDA 12.9)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:74363 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.3.4 (ROCm 7.0)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-7.0-rhel9
  • RHSA-2026:74362 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.3.4 (CUDA 13.0)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:74361 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.3.4 (ROCm 6.4)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:74360 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.3.4 (TPU)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:74359 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.3.4 (CPU)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:73987 Released 2026-09-30 · Red Hat rating Critical
    RHOAI 3.3.7 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +47
  • RHSA-2026:73962 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Base Images 3.0.3 (cuda)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:73961 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Base Images 3.0.3 (spyre)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:73960 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Base Images 3.0.3 (cpu)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:73959 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Base Images 3.0.3 (tpu)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:73930 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (rocm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:73929 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (cuda)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:73909 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Base Images 3.0.3 (rocm)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:73859 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:72502 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9
  • RHSA-2026:72476 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:72475 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:72470 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:72399 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:72395 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:72394 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:67935 Released 2026-09-24 · Red Hat rating Important
    OpenShift Container Platform 4.16.71 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202609140240-0, rhcos-ppc64le-416.94.202609140240-0, rhcos-s390x-416.94.202609140240-0 +1
  • RHSA-2026:65839 Released 2026-09-17 · Red Hat rating Important
    OpenShift Container Platform 4.13.71 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202609080414-0
  • RHSA-2026:68699 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.7 (CUDA)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:68698 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.7 (ROCm)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:68697 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.7 (Spyre)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
  • RHSA-2026:68696 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.3.7 (CUDA)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:65907 Released 2026-09-17 · Red Hat rating Important
    OpenShift Container Platform 4.12.98 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202609082051-0
  • RHSA-2026:65851 Released 2026-09-17 · Red Hat rating Important
    OpenShift Container Platform 4.18.55 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202609031320-0, rhcos-ppc64le-418.94.202609031320-0, rhcos-s390x-418.94.202609031320-0 +1
  • RHSA-2026:66357 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.22.14 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202609081748-0, rhcos-ppc64le-4.22.9.8.202609081748-0, rhcos-s390x-4.22.9.8.202609081748-0 +1
  • RHSA-2026:66018 Released 2026-09-09 · Red Hat rating Important
    Red Hat Update Infrastructure 5.3 security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
  • RHSA-2026:63140 Released 2026-09-03 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.19.2
    • Cert Manager support for Red Hat OpenShift release 1.19 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:63138 Released 2026-09-03 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.19.2
    • Cert Manager support for Red Hat OpenShift release 1.19 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:63135 Released 2026-09-03 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.19.2
    • Cert Manager support for Red Hat OpenShift release 1.19 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:62416 Released 2026-09-02 · Red Hat rating Important
    nodejs:22 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) nodejs-1:22.23.2-1.module+el9.6.0+24769+299a7e3a.aarch64::nodejs:22, nodejs-1:22.23.2-1.module+el9.6.0+24769+299a7e3a.ppc64le::nodejs:22, nodejs-1:22.23.2-1.module+el9.6.0+24769+299a7e3a.s390x::nodejs:22 +28
  • RHSA-2026:62236 Released 2026-09-01 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) sqlite-3.34.1-7.el9_4.2, sqlite-devel-3.34.1-7.el9_4.2
    • Red Hat Enterprise Linux BaseOS E4S (v.9.4) sqlite-3.34.1-7.el9_4.2, sqlite-libs-3.34.1-7.el9_4.2
  • RHSA-2026:62232 Released 2026-09-01 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) sqlite-3.34.1-6.el9_2.3, sqlite-devel-3.34.1-6.el9_2.3
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) sqlite-3.34.1-6.el9_2.3, sqlite-libs-3.34.1-6.el9_2.3
  • RHSA-2026:61783 Released 2026-08-31 · Red Hat rating Important
    A Subscription Management tool for finding and reporting Red Hat product usage
    • Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
  • RHSA-2026:61697 Released 2026-08-31 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) sqlite-3.46.1-5.el10_0.1, sqlite-devel-3.46.1-5.el10_0.1
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) sqlite-3.46.1-5.el10_0.1, sqlite-libs-3.46.1-5.el10_0.1
  • RHSA-2026:61629 Released 2026-08-31 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:61628 Released 2026-08-31 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:61627 Released 2026-08-31 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:59956 Released 2026-08-26 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) sqlite-3.34.1-8.el9_6.1, sqlite-devel-3.34.1-8.el9_6.1
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) sqlite-3.34.1-8.el9_6.1, sqlite-libs-3.34.1-8.el9_6.1
  • RHSA-2026:58936 Released 2026-08-24 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream (v. 9) sqlite-3.34.1-11.el9_8, sqlite-devel-3.34.1-11.el9_8
    • Red Hat Enterprise Linux BaseOS (v. 9) sqlite-3.34.1-11.el9_8, sqlite-libs-3.34.1-11.el9_8
  • RHSA-2026:59020 Released 2026-08-24 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) lemon-3.26.0-16.el8_6.4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) lemon-3.26.0-16.el8_6.4
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) sqlite-3.26.0-16.el8_6.4, sqlite-devel-3.26.0-16.el8_6.4, sqlite-doc-3.26.0-16.el8_6.4 +1
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) sqlite-3.26.0-16.el8_6.4, sqlite-devel-3.26.0-16.el8_6.4, sqlite-doc-3.26.0-16.el8_6.4 +1
  • RHSA-2026:59024 Released 2026-08-24 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) lemon-3.26.0-13.el8_4.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) lemon-3.26.0-13.el8_4.2
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) sqlite-3.26.0-13.el8_4.2, sqlite-devel-3.26.0-13.el8_4.2, sqlite-doc-3.26.0-13.el8_4.2 +1
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) sqlite-3.26.0-13.el8_4.2, sqlite-devel-3.26.0-13.el8_4.2, sqlite-doc-3.26.0-13.el8_4.2 +1
  • RHSA-2026:58927 Released 2026-08-24 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream (v. 10) sqlite-3.46.1-6.el10_2, sqlite-devel-3.46.1-6.el10_2
    • Red Hat Enterprise Linux BaseOS (v. 10) sqlite-3.46.1-6.el10_2, sqlite-libs-3.46.1-6.el10_2
  • RHSA-2026:58938 Released 2026-08-24 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream (v. 8) lemon-3.26.0-21.el8_10
    • Red Hat Enterprise Linux BaseOS (v. 8) sqlite-3.26.0-21.el8_10, sqlite-devel-3.26.0-21.el8_10, sqlite-doc-3.26.0-21.el8_10 +1
  • RHSA-2026:58939 Released 2026-08-24 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) lemon-3.26.0-18.el8_8.3
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) lemon-3.26.0-18.el8_8.3
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) sqlite-3.26.0-18.el8_8.3, sqlite-devel-3.26.0-18.el8_8.3, sqlite-doc-3.26.0-18.el8_8.3 +1
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) sqlite-3.26.0-18.el8_8.3, sqlite-devel-3.26.0-18.el8_8.3, sqlite-doc-3.26.0-18.el8_8.3 +1
  • RHSA-2026:55603 Released 2026-08-17 · Red Hat rating Important
    nodejs:24 security update
    • Red Hat Enterprise Linux AppStream (v. 9) nodejs-1:24.18.0-6.module+el9.8.0+24638+75f46aee.aarch64::nodejs:24, nodejs-1:24.18.0-6.module+el9.8.0+24638+75f46aee.ppc64le::nodejs:24, nodejs-1:24.18.0-6.module+el9.8.0+24638+75f46aee.s390x::nodejs:24 +25
  • RHSA-2026:55601 Released 2026-08-17 · Red Hat rating Important
    nodejs:22 security update
    • Red Hat Enterprise Linux AppStream (v. 9) nodejs-1:22.23.1-3.module+el9.8.0+24637+e0b636e5.aarch64::nodejs:22, nodejs-1:22.23.1-3.module+el9.8.0+24637+e0b636e5.ppc64le::nodejs:22, nodejs-1:22.23.1-3.module+el9.8.0+24637+e0b636e5.s390x::nodejs:22 +28
  • RHSA-2026:54530 Released 2026-08-13 · Red Hat rating Important
    nodejs:22 security update
    • Red Hat Enterprise Linux AppStream (v. 8) nodejs-1:22.23.1-3.module+el8.10.0+24640+6eba5e6e.aarch64::nodejs:22, nodejs-1:22.23.1-3.module+el8.10.0+24640+6eba5e6e.ppc64le::nodejs:22, nodejs-1:22.23.1-3.module+el8.10.0+24640+6eba5e6e.s390x::nodejs:22 +28
  • RHSA-2026:54371 Released 2026-08-12 · Red Hat rating Important
    nodejs:24 security update
    • Red Hat Enterprise Linux AppStream (v. 8) nodejs-1:24.18.0-3.module+el8.10.0+24639+56878497.aarch64::nodejs:24, nodejs-1:24.18.0-3.module+el8.10.0+24639+56878497.ppc64le::nodejs:24, nodejs-1:24.18.0-3.module+el8.10.0+24639+56878497.s390x::nodejs:24 +25
  • RHSA-2026:45779 Released 2026-07-25 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images lemon-3.53.4-0.1.hum1@aarch64, lemon-3.53.4-0.1.hum1@x86_64, sqlite-3.53.4-0.1.hum1@aarch64 +16

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    SQLite 3.53.2

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2026-10205 SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeekPriority LOW 31
    Show all 2 records →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Exploit IntelligenceAffectedNo fix yet
Red Hat AI Inference ServerAffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Cert Manager support for Red Hat OpenShift release 1.17Fixed RHSA-2026:82304, RHSA-2026:82322, RHSA-2026:82336, RHSA-2026:82888
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372, RHSA-2026:82857
Cert Manager support for Red Hat OpenShift release 1.19Fixed RHSA-2026:63135, RHSA-2026:63138, RHSA-2026:63140
Cert Manager support for Red Hat OpenShift release 1.20Fixed RHSA-2026:72394, RHSA-2026:72395, RHSA-2026:72399, RHSA-2026:72470, RHSA-2026:72475, RHSA-2026:72476, RHSA-2026:72502
Red Hat AI Inference Server 3.2Fixed RHSA-2026:61627, RHSA-2026:61628, RHSA-2026:61629, RHSA-2026:73859, RHSA-2026:73929, RHSA-2026:73930
Red Hat AI Inference Server 3.3Fixed RHSA-2026:68696, RHSA-2026:68697, RHSA-2026:68698, RHSA-2026:68699
Red Hat AI Inference Server 3.5Fixed RHSA-2026:82059, RHSA-2026:82061, RHSA-2026:82066, RHSA-2026:82368, RHSA-2026:82371, RHSA-2026:82415
Red Hat Discovery 2Fixed RHSA-2026:61783
Red Hat Enterprise Linux AI 3.3Fixed RHSA-2026:76041, RHSA-2026:76043
Red Hat Enterprise Linux AI 3.5Fixed RHSA-2026:92449, RHSA-2026:92452
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:58927
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:54371, RHSA-2026:54530, RHSA-2026:58938
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:55601, RHSA-2026:55603, RHSA-2026:58936
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:59024
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:59020
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:58939
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:62232
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:62236
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:61697
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:59956, RHSA-2026:62416
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:59024
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:59020
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:58939
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:58927
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:58938
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:58936
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:59024
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:59020
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:58939
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:62232
Red Hat Enterprise Linux BaseOS E4S (v.9.4)Fixed RHSA-2026:62236
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:61697
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:59956
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:59024
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)Fixed RHSA-2026:59020
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:58939
Red Hat Hardened ImagesFixed RHSA-2026:45779
Red Hat OpenShift AI 2.25Fixed RHSA-2026:87410
Red Hat OpenShift AI 3.0Fixed RHSA-2026:73909, RHSA-2026:73959, RHSA-2026:73960, RHSA-2026:73961, RHSA-2026:73962
Red Hat OpenShift AI 3.2Fixed RHSA-2026:74458, RHSA-2026:74459, RHSA-2026:74460, RHSA-2026:74461, RHSA-2026:74462, RHSA-2026:74463
Red Hat OpenShift AI 3.3Fixed RHSA-2026:73987, RHSA-2026:74359, RHSA-2026:74360, RHSA-2026:74361, RHSA-2026:74362, RHSA-2026:74363, RHSA-2026:74364, RHSA-2026:74365, RHSA-2026:74450, RHSA-2026:80756, RHSA-2026:81127
Red Hat OpenShift AI 3.4Fixed RHSA-2026:74674, RHSA-2026:74677, RHSA-2026:74678, RHSA-2026:74679, RHSA-2026:74681, RHSA-2026:74683, RHSA-2026:74685, RHSA-2026:74687, RHSA-2026:74688, RHSA-2026:84734, RHSA-2026:92510
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:65907
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2026:65839
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:73866
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:82811
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:67935
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:70586
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:65851
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:66357
Red Hat Update Infrastructure 5Fixed RHSA-2026:66018
Not affected: 8 products
  • Cert Manager support for Red Hat OpenShift release 1.20
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.3
  • Red Hat OpenShift AI 3.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-11824
  2. 2026-10-03 Alias added: GHSA-8g48-4wfm-7247
  3. 2026-10-06 Fix available: RHSA-2026:76043 · Red Hat
  4. 2026-10-06 Fix available: RHSA-2026:76041 · Red Hat
  5. 2026-10-06 Fix available: Red Hat Enterprise Linux AI 3.3 · Red Hat
  6. 2026-10-07 Fix available: RHSA-2026:73987 · Red Hat
  7. 2026-10-07 Affected versions changed · Red Hat
  8. 2026-10-09 Fix available: RHSA-2026:73866 · Red Hat
  9. 2026-10-09 Fix available: Red Hat OpenShift Container Platform 4.14 · Red Hat
  10. 2026-10-13 Fix available: RHSA-2026:82066 · Red Hat
  11. 2026-10-13 Fix available: RHSA-2026:80756 · Red Hat
  12. 2026-10-13 Fix available: RHSA-2026:81127 · Red Hat
  13. 2026-10-13 Fix available: RHSA-2026:82061 · Red Hat
  14. 2026-10-13 Fix available: RHSA-2026:82059 · Red Hat
  15. 2026-10-13 Fix available: Red Hat AI Inference Server 3.5 · Red Hat
  16. 2026-10-14 Fix available: RHSA-2026:82368 · Red Hat
  17. 2026-10-14 Fix available: RHSA-2026:82415 · Red Hat
  18. 2026-10-14 Fix available: RHSA-2026:82371 · Red Hat
  19. 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
  20. 2026-10-14 Fix available: RHSA-2026:82322 · Red Hat
  21. 2026-10-14 Fix available: RHSA-2026:82336 · Red Hat
  22. 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
  23. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  24. 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
  25. 2026-10-15 Fix available: RHSA-2026:82857 · Red Hat
  26. 2026-10-15 Fix available: RHSA-2026:82888 · Red Hat
  27. 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 · Red Hat
  28. 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
  29. 2026-10-20 Affected versions changed · Red Hat
  30. 2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
  31. 2026-10-23 Fix available: RHSA-2026:82811 · Red Hat
  32. 2026-10-23 Fix available: Red Hat OpenShift AI 2.25, Red Hat OpenShift Container Platform 4.15 · Red Hat
  33. 2026-10-30 Fix available: RHSA-2026:92452 · Red Hat
  34. 2026-10-30 Fix available: RHSA-2026:92449 · Red Hat
  35. 2026-10-30 Fix available: RHSA-2026:92510 · Red Hat
  36. 2026-10-30 Fix available: Red Hat Enterprise Linux AI 3.5 · Red Hat
  37. 2026-10-30 Affected versions changed · Red Hat

References

Patch 2

Other 1

  • TI-2026-82983 Heap buffer overflow in SQLite FTS5 rowid list merging CVSS 4.0HIGH 8.5
  • TI-2025-43154 An information disclosure issue in the zipfileInflate function in the zipfile extension… CVSS 3.1HIGH 7.5
  • TI-2025-06334 Integer Truncation on SQLite CVSS 4.0HIGH 7.2
  • TI-2022-16180 SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if… CVSS 3.1HIGH 7.5
  • TI-2021-11445 An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial… CVSS 3.1HIGH 7.5
  • TI-2019-06073 Out-of-bounds read in SQLite CVSS 3.1CRITICAL 9.8
See all 75 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences