PT-2026-64981 · Undefined · Undefined

CVE-2026-51297 · Publicado 2026-07-27 · Atualizado 2026-07-27

NVD

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.

Exploit

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2026-51297

Produtos afetados

Undefined

Referências · 3

• 🔥 https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51297 · Exploit
• https://github.com/sqlite/sqlite/blob/master/src/json.c · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-51297 · Nota de Segurança