CVE-2026-51297
sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can...
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
What each source reports
GitHub Advisories Score usedGHSA-jwwq-j3wf-76qr
sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can...
sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.
- Record
GHSA-jwwq-j3wf-76qr- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
- Record
CVE-2026-51297- Updated
- 2026-11-02
EUVDEUVD-2026-49352
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
- Record
EUVD-2026-49352- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
NVD No score
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
- Record
CVE-2026-51297- Updated
- 2026-11-02
OSV
sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.
- Record
CVE-2026-51297- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:45779
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:45779- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-51297
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
- Record
UBUNTU-CVE-2026-51297- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBIT-sqlite-2026-51297 No score
sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.
- Record
BIT-sqlite-2026-51297- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sqliteBitnami |
3.41.0 to 3.41.0 | None known |
lemonRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqliteRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-analyzerRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-debugRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-develRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-docRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-libsRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-tclRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-toolsRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-51297 has been rejected by its source and should not be treated as a live vulnerability, published July 27, 2026.
References
nvd.nist.gov/vuln/detail/CVE-2026-51297
github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51297
access.redhat.com/errata/RHSA-2026:45779
Show 28 moreShow less
images.redhat.com
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_45779.json
bugzilla.redhat.com/show_bug.cgi?id=2487258
cve.org/CVERecord?id=CVE-2026-11822
sqlite.org/releaselog/3_53_2.html
vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension
ubuntu.com/security/CVE-2026-51297