Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jwwq-j3wf-76qr

Опубликовано: 27 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.

8.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

ubuntu
10 дней назад

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.

redhat
10 дней назад

A flaw was found in sqlite. This use-after-free vulnerability in the JSON parsing logic allows remote attackers to craft malicious JSON payloads. This can trigger memory deallocation followed by illegal memory access, potentially leading to arbitrary code execution, sensitive information leakage, or denial of service.

nvd
10 дней назад

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS3: 8.8
fstec
12 дней назад

Уязвимость функции jsonBlobEdit() файла json.c системы управления базами данных SQLite, позволяющая нарушителю вызвать отказ в обслуживании, раскрыть защищаемую информацию или выполнить произвольный код

8.8 High

CVSS3

Дефекты

CWE-416