Critical Vulnerabilities in sqlite3 Affecting SUSE Systems

SUSE has released an important update addressing two critical vulnerabilities in sqlite3, specifically within the FTS5 full-text extension. CVE-2026-11822 involves memory corruption that could lead to process crashes, memory exhaustion, or arbitrary code execution. CVE-2026-11824 is a heap-based buffer overflow vulnerability that allows similar exploitative outcomes. Both vulnerabilities have a CVSS score of 7.8 from SUSE and 8.5 from NVD, indicating a high severity level. The vulnerabilities were published on June 9, 2026, and the update was released on June 15, 2026. Affected systems include sqlite2 and sqlite3, which are widely used in various applications. Users are advised to apply the patches immediately to mitigate potential risks.

Key Points: • Two critical vulnerabilities in sqlite3 have been identified, affecting SUSE systems. • CVE-2026-11822 and CVE-2026-11824 allow for process crashes and arbitrary code execution. • Patches were released on June 15, 2026, following the vulnerabilities' publication on June 9, 2026.