6408 matches found
CVE-2026-51303
SQLite core parsing contains a use-after-free in sqlite3ExprListDelete (expr.c). Frees an ExprList and then accesses the freed object, enabling a remote attacker to crash the app, leak memory, or, in some scenarios, achieve arbitrary code execution. Affected component: core parsing; potentially S...
EUVD-2026-49357
sqlite 3.41 has a use-after-free UAF vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object via sqlite3ExprListDelete, then attempts to access the nExpr member of the already freed object. This dangling pointer access causes invalid...
CVE-2026-51298
...
CVE-2026-51296
...
CVE-2026-51303
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51297
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2026-51302
...
CVE-2026-51302
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51298
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
EUVD-2026-49354
A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite 3.41. After invoking sqlite3ExprDelete to release an expression object, the program still retains the dangling pointer and subsequently accesses member fields of the already freed memory. By...
CVE-2026-51304
...
CVE-2026-51297
sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial...
CVE-2026-51298
Summary of findings (CVE-2026-51298) : Several connected advisories confirm a use-after-free vulnerability in SQLite 3.41 related to the JSON extraction function. The flaw occurs when, after releasing the JsonParse object with jsonParseFree(), the code still accesses internal members of the freed...
EUVD-2026-49356
A use-after-free UAF vulnerability was discovered in the core parsing component of SQLite 3.41. The flaw occurs because the program frees an ExprList object via sqlite3ExprListDelete and then subsequently accesses the dangling pointer of the released object. A remote adversary can supply speciall...
CVE-2026-51300
SQLite 3.41 contains a use-after-free vulnerability in the expression parsing/memory management logic. Specifically, after sqlite3ExprDelete releases an expression object, the program may still access freed memory in expr.c, allowing a remote attacker to craft malicious SQL queries that trigger i...
CVE-2026-51304
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51302
SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, and the subsequent exprComputeOperands function continues to access the already freed register memory. By supplying a...
CVE-2026-51304
sqlite 3.41 has a use-after-free UAF vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object via sqlite3ExprListDelete, then attempts to access the nExpr member of the already freed object. This dangling pointer access causes invalid...
CVE-2026-51296
SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed at line 3555, while line 3575 still calls jsonLookupStep with the released pointer. Remote attackers can exploit this flaw to crash the service and leak heap memory information...