BIT-sqlite-2026-51302

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/sqlite/BIT-sqlite-2026-51302.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-sqlite-2026-51302
Aliases
Published
2026-07-30T08:53:34.203Z
Modified
2026-07-31T09:15:05.632400721Z
Summary
[none]
Details

SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, and the subsequent exprComputeOperands function continues to access the already freed register memory. By supplying a malicious SQL statement, a remote attacker can exploit this flaw to cause denial of service, leak sensitive information, or potentially execute arbitrary code on the affected system.

Database specific
{
    "cpes": [
        "cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"
    ],
    "severity": "High"
}
References

Affected packages

Bitnami / sqlite

Package

Name
sqlite
Purl
pkg:bitnami/sqlite

Severity

  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
3.41.0
Last affected
3.41.0

Database specific

source
"https://github.com/bitnami/vulndb/tree/main/data/sqlite/BIT-sqlite-2026-51302.json"