> CVE-2026-51302

« BACK_TO_HOME
PUBLISHED
2026-07-27 16:17
MODIFIED
2026-07-27 16:17
EPSS (Prob. Exploit)
0.40%
Top 67.1%
DATA SOURCES:
NVD 🔗 2026-07-27 RED HAT 🔗 2026-08-09 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-08-03

> DESCRIPTION

SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, and the subsequent exprComputeOperands function continues to access the already freed register memory. By supplying a malicious SQL statement, a remote attacker can exploit this flaw to cause denial of service, leak sensitive information, or potentially execute arbitrary code on the affected system.

> AFFECTED_PRODUCTS

Red Hat - Red Hat Hardened Images
Version: 3.53.4

> RED HAT SEVERITY ASSESSMENT

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown
2 versions affected
ALIASES:
BIT-sqlite-2026-51302

> HISTORIQUE DES MODIFICATIONS

Première apparition
27/07/2026 16:17
Source: NVD
📊 ENRICHISSEMENT 09/08/2026 05:02
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Important" }
Nouvelle valeur:
{ "threat_severity": null, "severity_scale": null }
📊 ENRICHISSEMENT 02/08/2026 05:02
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Important", "severity_scale": null }
📊 ENRICHISSEMENT 02/08/2026 05:02
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 2 months ago

> REFERENCES

https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51302
https://github.com/sqlite/sqlite/blob/master/src/expr.c
« BACK_TO_HOME