Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-27T00:00:00 sqlite: SQLite: Denial of Service via use-after-free in JSON extraction 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-825

A flaw was found in SQLite. A remote attacker could exploit a use-after-free vulnerability in the JSON extraction function. This occurs when the program attempts to access memory after it has been freed, specifically within the `JsonParse` object. Successful exploitation of this vulnerability can lead to a service crash and a denial of service (DoS) for affected systems.

This Moderate flaw in SQLite's JSON extraction function can lead to a denial of service. Applications that process untrusted JSON input using SQLite in Red Hat products are susceptible to a service crash due to a use-after-free vulnerability. This could impact the availability of services relying on SQLite for JSON data handling. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat Hardened Images 2026-07-25T00:00:00Z RHSA-2026:45779 sqlite-main-3.53.4-0.1.hum1 Red Hat Enterprise Linux 10 Affected sqlite Red Hat Enterprise Linux 6 Affected sqlite Red Hat Enterprise Linux 7 Affected sqlite Red Hat Enterprise Linux 8 Affected mingw-sqlite Red Hat Enterprise Linux 8 Affected nodejs:22/nodejs Red Hat Enterprise Linux 8 Affected nodejs:24/nodejs Red Hat Enterprise Linux 8 Not affected rust-toolset:rhel8/rust Red Hat Enterprise Linux 8 Affected sqlite Red Hat Enterprise Linux 9 Affected nodejs:22/nodejs Red Hat Enterprise Linux 9 Affected nodejs:24/nodejs Red Hat Enterprise Linux 9 Affected rust Red Hat Enterprise Linux 9 Affected sqlite Red Hat Enterprise Linux AI (RHEL AI) 3 Affected rust Red Hat OpenShift Container Platform 4 Affected rhcos https://www.cve.org/CVERecord?id=CVE-2026-51298 https://nvd.nist.gov/vuln/detail/CVE-2026-51298 https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51298 https://github.com/sqlite/sqlite/blob/master/src/json.c