CVE-2026-51292 in SQLite

Riassunto

di MITRE • 30/07/2026

sqlite 3.41 has a use-after-free vulnerability in the memory buffer processing logic. Remote attackers can exploit this flaw via specially crafted input to cause arbitrary code execution, sensitive information leakage, or service denial.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: MITRE
• Prenotare: 07/06/2026
• Divulgazione: 30/07/2026
• Moderazione: accettato
• Voce: VDB-384872
• CPE: pronto
• CWE: CWE-416 (confermato)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-51292
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-51292
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-51292/