CVE-2026-51297

Summary

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

Additional References

• https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51297

References

• https://github.com/sqlite/sqlite/blob/master/src/json.c
• https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51297

• ←Previous
• Next→