Description

sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree(), the program still accesses internal member of the freed pointer, which can cause service crash and denial of service.

Remediation

References

CVE-2026-51298

Related Vulnerabilities

WordPress Plugin Shortcode Addons-with Visual Composer, Divi, Beaver Builder and Elementor Extension Function Injection (3.2.5)

Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-32052)

Moodle Insecure Storage of Sensitive Information Vulnerability (CVE-2024-43427)

WordPress Plugin Tidio Live Chat Cross-Site Request Forgery (4.1.0)

Internet Information Services Other Vulnerability (CVE-1999-1148)

Severity

Medium

Classification

CVE-2026-51298 CWE-416 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities