CVE-2026-51296

Name of the Vulnerable Software and Affected Versions SQLite version 3.41

Description A use-after-free flaw exists in the jsonRemoveFunc() function of the SQLite JSON module. The issue occurs because a parsed JSON object is freed, but the system subsequently attempts to call jsonLookupStep() using the released pointer. Remote attackers can exploit this to cause a service crash or leak heap memory information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.