PT-2026-64981 · Undefined · Undefined

CVE-2026-51297 · Published 2026-07-27 · Updated 2026-07-27

NVD

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-51297

Affected Products

Undefined

References · 3

• 🔥 https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51297 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-51297 · Security Note
• https://github.com/sqlite/sqlite/blob/master/src/json.c · Note