6409 matches found
BIT-SQLITE-2026-51302
SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, and the subsequent exprComputeOperands function continues to access the already freed register memory. By supplying a...
BIT-SQLITE-2026-51298
sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree, the program still accesses internal member of the freed pointer, which can cause service crash and denial of service...
BIT-SQLITE-2026-51297
sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial...
BIT-SQLITE-2026-51296
SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed at line 3555, while line 3575 still calls jsonLookupStep with the released pointer. Remote attackers can exploit this flaw to crash the service and leak heap memory information...
CLEANSTART-2026-PO79955 Security fixes in sqlite 3.28.0-r0
Package sqlite version 3.28.0-r0 fixes 2 vulnerabilities: CVE-2019-5018, CVE-2019-8457...
CLEANSTART-2026-WA09964 Security fixes in sqlite 3.34.1-r0
Package sqlite version 3.34.1-r0 fixes 1 vulnerabilities: CVE-2021-20227...
nodejs: Node.js node:sqlite: Unintended data modification due to stale statement iterator
A flaw was found in Node.js's node:sqlite module. This vulnerability allows a previously used database statement, which should have been reset, to be re-executed with new parameters. This could lead to unintended data modifications or integrity issues within the application...
PT-2026-66523
Name of the Vulnerable Software and Affected Versions SQLite version 3.41 Description A use-after-free issue exists in the jsonCacheInsert function within the json.c module of the JSON cache management system. A remote attacker could exploit this by using a specially crafted JSON file to execute...
CVE-2026-51292
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
EUVD-2026-51252
SQLite 3.41 is vulnerable to use after free in the jsonArrayLengthFunc function...
PT-2026-66522
SQLite 3.41 has a use-after-free vulnerability in the shared cache lock management logic of the btree module. The program frees a BtLock structure without removing the node from the linked list. Subsequent linked list traversal accesses the released memory, which can lead to denial of service and...
EUVD-2026-51253
SQLite 3.41 has a use-after-free vulnerability in the shared cache lock management logic of the btree module. The program frees a BtLock structure without removing the node from the linked list. Subsequent linked list traversal accesses the released memory, which can lead to denial of service and...
CVE-2026-51295
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
EUVD-2026-51251
SQLite 3.41 is vulnerable to use after free in the jsonExtractFunc function. Premature release of parsed JSON object memory leads to subsequent illegal access of freed pointer. Remote attackers can trigger this flaw via specially crafted SQL queries, resulting in service crash and sensitive memor...
EUVD-2026-51256
sqlite 3.41 is vulnerable to use after free in the json.c jsonCacheInsert function of the JSON cache management module...
CVE-2026-51295
SQLite 3.41 is vulnerable to a use-after-free in the jsonExtractFunc function, where premature release of parsed JSON object memory leads to illegal access of freed pointers. This remote flaw allows crafted SQL queries to crash the service and may leak sensitive memory information. Root cause: pr...