CVE-2026-51295
Rejected Rejected - Do Not Use

Use After Free in SQLite 3.41 via JSON Queries

Publication date: 2026-07-30

Last updated on: 2026-07-31

Assigner: MITRE

Description
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-31
Generated
2026-07-31
AI Q&A
2026-07-31
EPSS Evaluated
N/A
NVD
CVE-2026-51295
EUVD
EUVD-2026-51251

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sqlite sqlite 3.41

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

SQLite 3.41 has a use-after-free vulnerability in the jsonExtractFunc function. This occurs when parsed JSON object memory is released too early, allowing attackers to access freed memory through specially crafted SQL queries. This can cause the service to crash and leak sensitive memory information.

Detection Guidance

This vulnerability cannot be directly detected through network or system commands as it requires specific SQL query patterns to trigger. Focus on monitoring for crashes in SQLite applications or unusual memory access patterns in logs.

Impact Analysis

This vulnerability can lead to service crashes and potential exposure of sensitive memory data. Attackers could exploit it to disrupt database operations or extract confidential information from memory.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by exposing sensitive memory information through service crashes triggered by crafted SQL queries. Memory leaks or unauthorized access may violate data protection requirements under these regulations.

Mitigation Strategies

Upgrade SQLite to a version later than 3.41 to address the use-after-free vulnerability in jsonExtractFunc. Avoid using JSON functions in SQL queries until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-51295. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart