CVE-2026-51297

CVE-2026-51297CVE-2026-51297

Description

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.

Scoring

CVSS 8.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Last modified2026-07-27
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.