CVE-2026-51302
SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The...
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
What each source reports
GitHub Advisories Score usedGHSA-vrg3-8p22-cwh8
SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The...
SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, and the subsequent exprComputeOperands function continues to access the already freed register memory. By supplying a malicious SQL statement, a remote attacker can exploit this flaw to cause denial of service, leak sensitive information, or potentially execute arbitrary code on the affected system.
- Record
GHSA-vrg3-8p22-cwh8- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
- Record
CVE-2026-51302- Updated
- 2026-11-02
EUVDEUVD-2026-49355
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
- Record
EUVD-2026-49355- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
NVD No score
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
- Record
CVE-2026-51302- Updated
- 2026-11-02
OSV
SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, and the subsequent exprComputeOperands function continues to access the already freed register memory. By supplying a malicious SQL statement, a remote attacker can exploit this flaw to cause denial of service, leak sensitive information, or potentially execute arbitrary code on the affected system.
- Record
CVE-2026-51302- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:45779
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:45779- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-51302
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
- Record
UBUNTU-CVE-2026-51302- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBIT-sqlite-2026-51302 No score
SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, and the subsequent exprComputeOperands function continues to access the already freed register memory. By supplying a malicious SQL statement, a remote attacker can exploit this flaw to cause denial of service, leak sensitive information, or potentially execute arbitrary code on the affected system.
- Record
BIT-sqlite-2026-51302- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sqliteBitnami |
3.41.0 to 3.41.0 | None known |
lemonRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqliteRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-analyzerRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-debugRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-develRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-docRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-libsRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-tclRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
sqlite-toolsRed Hat:hummingbird:1 From an advisory covering 6 CVEs |
before 0:3.53.4-0.1.hum1 | 0:3.53.4-0.1.hum1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-51302 has been rejected by its source and should not be treated as a live vulnerability, published July 27, 2026.
References
nvd.nist.gov/vuln/detail/CVE-2026-51302
github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51302
access.redhat.com/errata/RHSA-2026:45779
Show 29 moreShow less
images.redhat.com
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_45779.json
bugzilla.redhat.com/show_bug.cgi?id=2487258
cve.org/CVERecord?id=CVE-2026-11822
sqlite.org/releaselog/3_53_2.html
vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension
ubuntu.com/security/CVE-2026-51302