PT-2026-64983 · Undefined · Undefined

CVE-2026-51300 · Publicado 2026-07-27 · Atualizado 2026-07-27

Mitre

A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite 3.41. After invoking sqlite3ExprDelete to release an expression object, the program still retains the dangling pointer and subsequently accesses member fields of the already freed memory. By constructing malicious SQL queries, a remote attacker can trigger invalid memory access, leading to application crash and sensitive memory information leakage.

Exploit

Identificadores relacionados

CVE-2026-51300

Produtos afetados

Undefined

Referências · 3

• 🔥 https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51300 · Exploit
• https://github.com/sqlite/sqlite/blob/master/src/expr.c · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-51300 · Nota de Segurança