CVE-2026-51291
Rejected Rejected - Do Not Use

Use After Free in SQLite JSON Cache Management

Publication date: 2026-07-30

Last updated on: 2026-07-31

Assigner: MITRE

Description
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-31
Generated
2026-07-31
AI Q&A
2026-07-31
EPSS Evaluated
N/A
NVD
CVE-2026-51291
EUVD
EUVD-2026-51256

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sqlite sqlite 3.41

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-416 The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a use-after-free issue in SQLite version 3.41. It occurs in the json.c file specifically in the jsonCacheInsert function of the JSON cache management module. Use-after-free means a program tries to use memory after it has been freed, potentially leading to crashes or arbitrary code execution.

Detection Guidance

This vulnerability is specific to SQLite 3.41 and involves a use-after-free issue in the json.c jsonCacheInsert function. Detection requires checking the SQLite version in use. Run 'sqlite3 --version' to verify if your system uses SQLite 3.41. If so, update to a patched version immediately.

Impact Analysis

This vulnerability could allow an attacker to execute arbitrary code, crash the application, or escalate privileges on systems using SQLite 3.41. It may lead to data corruption, denial of service, or unauthorized access depending on the application's context.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. However, its exploitation could lead to unauthorized data access or modification, which may violate these regulations depending on the affected system's use case.

Mitigation Strategies

Update SQLite to a version later than 3.41 to address the use-after-free vulnerability in json.c. Monitor vendor advisories for patches and apply them promptly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-51291. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart