BIT-sqlite-2026-51298

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/sqlite/BIT-sqlite-2026-51298.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-sqlite-2026-51298
Aliases
Published
2026-07-30T08:53:33.123Z
Modified
2026-07-30T09:15:15.642456361Z
Summary
[none]
Details

sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree(), the program still accesses internal member of the freed pointer, which can cause service crash and denial of service.

Database specific
{
    "cpes": [
        "cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
}
References

Affected packages

Bitnami / sqlite

Package

Name
sqlite
Purl
pkg:bitnami/sqlite

Severity

  • 6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
3.41.0
Last affected
3.41.0

Database specific

source
"https://github.com/bitnami/vulndb/tree/main/data/sqlite/BIT-sqlite-2026-51298.json"