CVE-2026-51296 in SQLite
الملخص
بحسب MITRE • 27/07/2026
SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed at line 3555, while line 3575 still calls jsonLookupStep with the released pointer. Remote attackers can exploit this flaw to crash the service and leak heap memory information.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.