SQLite FTS5 vulnerabilities (CVE)

CVE records published for SQLite FTS5, newest first. Follow to get an email when a new one appears.

1 results
6.9Medium
CVE-2025-7709

Out Of Bounds write in FTS5 Extension in SQLite

SQLite FTS5

An integer overflow exists in the FTS5 https://sqlite.org/fts5.html  extension. It occurs when the size of an array of tombstone pointers is calculated and truncated into a 32-bit integer. A pointer to partially controlled data can then be written out of bounds.