CVE-2026-51293 in SQLite

Resumen

por MITRE • 2026-07-30

A use-after-free vulnerability exists in SQLite 3.41 when the jsonBlobAppendNode() function is invoked subsequent to sqlite3DbFree() being called on the aBlob member of the Parse structure.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: MITRE
• Reservar: 2026-06-07
• Divulgación: 2026-07-30
• Moderación: aceptado
• Artículo: VDB-384875
• CPE: listo
• CWE: CWE-416 (confirmado)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Actividades: bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-51293
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-51293
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-51293/