> CVE-2026-51297

« BACK_TO_HOME
PUBLISHED
2026-07-27 16:17
MODIFIED
2026-07-27 16:17
EPSS (Prob. Exploit)
0.34%
Top 73.0%
DATA SOURCES:
NVD 🔗 2026-07-27 RED HAT 🔗 2026-08-09 FIRST EPSS 🔗 2026-11-01 OSV 🔗 2026-08-03

> DESCRIPTION

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.

> AFFECTED_PRODUCTS

Red Hat - Red Hat Hardened Images
Version: 3.53.4

> RED HAT SEVERITY ASSESSMENT

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown
2 versions affected
ALIASES:
BIT-sqlite-2026-51297

> HISTORIQUE DES MODIFICATIONS

Première apparition
27/07/2026 16:17
Source: NVD
📊 ENRICHISSEMENT 09/08/2026 05:02
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Important" }
Nouvelle valeur:
{ "threat_severity": null, "severity_scale": null }
📊 ENRICHISSEMENT 02/08/2026 05:02
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Important", "severity_scale": null }
📊 ENRICHISSEMENT 02/08/2026 05:02
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 2 months ago

> REFERENCES

https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51297
https://github.com/sqlite/sqlite/blob/master/src/json.c
« BACK_TO_HOME