CVE-2026-54620

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-54620
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54620.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-54620
Aliases
Downstream
Published
2026-07-28T16:23:38.389Z
Modified
2026-08-12T16:41:16.326106Z
Severity
  • 2.0 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks
Details

sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is fixed in version 2.9.5.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-416"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54620.json"
}
References

Affected packages

Git / github.com/sparklemotion/sqlite3-ruby

Affected ranges

Type
GIT
Repo
https://github.com/sparklemotion/sqlite3-ruby
Events
Introduced
9a18cb9697d5bf6bdfd19e20e49934b0ce83a12a
Fixed
b24e1e6076528b7f95f99acf7a81c70d0004c726
Fixed
747e7de5166a0329a517402144408dfe45977962
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "2.1.0"
        },
        {
            "fixed": "2.9.5"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v2.*
v2.1.0
v2.1.1
v2.2.0
v2.3.0
v2.3.1
v2.4.0
v2.4.1
v2.5.0
v2.5.0.rc1
v2.6.0
v2.7.0
v2.7.1
v2.7.2
v2.7.3
v2.7.4
v2.8.0
v2.8.1
v2.9.0
v2.9.1
v2.9.2
v2.9.2.rc1
v2.9.2.rc2
v2.9.3
v2.9.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54620.json"
vanir_signatures 
[
    {
        "target": {
            "function": "sqlite3_rb_discard",
            "file": "ext/sqlite3/database.c"
        },
        "deprecated": false,
        "source": "https://github.com/sparklemotion/sqlite3-ruby/commit/b24e1e6076528b7f95f99acf7a81c70d0004c726",
        "id": "CVE-2026-54620-36ea4fd9",
        "signature_version": "v1",
        "digest": {
            "length": 191.0,
            "function_hash": "230264218131979185470418694721117338542"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "file": "ext/sqlite3/database.c"
        },
        "deprecated": false,
        "source": "https://github.com/sparklemotion/sqlite3-ruby/commit/b24e1e6076528b7f95f99acf7a81c70d0004c726",
        "id": "CVE-2026-54620-6d62c435",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "265689249784512259660747625313946247212",
                "131755143084933356590064351947908408322",
                "172163203058175261443017676469810333826",
                "99368928534202922022608717387938448892",
                "189913336094798000787304534379186812386",
                "214805861890130422514572409193550623479",
                "217544246339400958419911529239314275950",
                "99368928534202922022608717387938448892"
            ]
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "function": "sqlite3_rb_close",
            "file": "ext/sqlite3/database.c"
        },
        "deprecated": false,
        "source": "https://github.com/sparklemotion/sqlite3-ruby/commit/b24e1e6076528b7f95f99acf7a81c70d0004c726",
        "id": "CVE-2026-54620-cf0a461b",
        "signature_version": "v1",
        "digest": {
            "length": 191.0,
            "function_hash": "230264218131979185470418694721117338542"
        },
        "signature_type": "Function"
    }
]
vanir_signatures_modified 
"2026-08-12T16:41:16Z"