BIT-sqlite-2026-51297

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/sqlite/BIT-sqlite-2026-51297.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-sqlite-2026-51297
Aliases
  • CVE-2026-51297
Published
2026-07-30T08:53:31.986Z
Modified
2026-07-30T09:15:15.313442878Z
Summary
[none]
Details

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.

Database specific
{
    "severity": "High",
    "cpes": [
        "cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"
    ]
}
References

Affected packages

Bitnami / sqlite

Package

Name
sqlite
Purl
pkg:bitnami/sqlite

Severity

  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
3.41.0
Last affected
3.41.0

Database specific

source
"https://github.com/bitnami/vulndb/tree/main/data/sqlite/BIT-sqlite-2026-51297.json"