CVE-2026-51297

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial...

CVE-2026-51298

sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree, the program still accesses internal member of the freed pointer, which can cause service crash and denial of service...

PT-2026-64983

A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite 3.41. After invoking sqlite3ExprDelete to release an expression object, the program still retains the dangling pointer and subsequently accesses member fields of the already freed memory. By...

CVE-2026-51298

CVE-2026-51298 affects SQLite 3.41. The issue is a use-after-free in the JSON extraction function: after releasing a JsonParse object with jsonParseFree(), the code may still access an internal member of the freed pointer, which can cause a service crash and denial of service. The CVE entry lists...

CVE-2026-51297

SQLite 3.41 contains a use-after-free in the JSON parsing logic. Remote attackers can craft a malicious JSON payload to trigger memory free followed by invalid access, potentially leading to arbitrary code execution, sensitive information leakage, and service denial. The sources confirm sqlite 3....