PT-2026-64982 · Undefined · Undefined

CVE-2026-51298 · Publicado 2026-07-27 · Atualizado 2026-07-27

NVD

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree(), the program still accesses internal member of the freed pointer, which can cause service crash and denial of service.

Exploit

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2026-51298

Produtos afetados

Undefined

Referências · 3

• 🔥 https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51298 · Exploit
• https://github.com/sqlite/sqlite/blob/master/src/json.c · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-51298 · Nota de Segurança