https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 02:19:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-10653 bdu:2026-10653 https://cve.radiocsirt.org/vuln/bdu:2026-10653 https://cve.radiocsirt.org/vuln/bit-sqlite-2026-51304 <p><strong>Affected:</strong> Bitnami: sqlite</p> <p>sqlite 3.41 has a use-after-free (UAF) vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object via sqlite3ExprListDelete(), then attempts to access the nExpr member of the already freed object. This dangling pointer access causes invalid memory read operations. By constructing a malicious SQL statement containing an ORDER BY clause with a large number of items, a remote adversary can trigger this vulnerability. Successful exploitation can result in application crash (denial of service), leakage of sensitive memory contents, and under certain memory layout conditions, arbitrary code execution on the affected system.</p> <p><strong>Affected:</strong> Bitnami: sqlite</p> <p>sqlite 3.41 has a use-after-free (UAF) vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object via sqlite3ExprListDelete(), then attempts to access the nExpr member of the already freed object. This dangling pointer access causes invalid memory read operations. By constructing a malicious SQL statement containing an ORDER BY clause with a large number of items, a remote adversary can trigger this vulnerability. Successful exploitation can result in application crash (denial of service), leakage of sensitive memory contents, and under certain memory layout conditions, arbitrary code execution on the affected system.</p> https://cve.radiocsirt.org/vuln/bit-sqlite-2026-51304 https://cve.radiocsirt.org/vuln/fkie_cve-2026-51304 <p>Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.</p> <p>Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-51304 https://cve.radiocsirt.org/vuln/ghsa-w2f6-h8v8-pw69 <p>sqlite 3.41 has a use-after-free (UAF) vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object via sqlite3ExprListDelete(), then attempts to access the nExpr member of the already freed object. This dangling pointer access causes invalid memory read operations. By constructing a malicious SQL statement containing an ORDER BY clause with a large number of items, a remote adversary can trigger this vulnerability. Successful exploitation can result in application crash (denial of service), leakage of sensitive memory contents, and under certain memory layout conditions, arbitrary code execution on the affected system.</p> <p>sqlite 3.41 has a use-after-free (UAF) vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object via sqlite3ExprListDelete(), then attempts to access the nExpr member of the already freed object. This dangling pointer access causes invalid memory read operations. By constructing a malicious SQL statement containing an ORDER BY clause with a large number of items, a remote adversary can trigger this vulnerability. Successful exploitation can result in application crash (denial of service), leakage of sensitive memory contents, and under certain memory layout conditions, arbitrary code execution on the affected system.</p> https://cve.radiocsirt.org/vuln/ghsa-w2f6-h8v8-pw69 https://cve.radiocsirt.org/vuln/rhsa-2026:45779 <p>sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 sqlite: SQLite: Denial of Service via use-after-free in JSON extraction</p> <p>sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 sqlite: SQLite: Denial of Service via use-after-free in JSON extraction</p> https://cve.radiocsirt.org/vuln/rhsa-2026:45779 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-51304 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: sqlite, Ubuntu:Pro:14.04:LTS: sqlite3, Ubuntu:Pro:16.04:LTS: sqlite3, Ubuntu:16.04:LTS: sqlite, Ubuntu:Pro:18.04:LTS: sqlite3, Ubuntu:18.04:LTS: sqlite, Ubuntu:Pro:20.04:LTS: sqlite3, Ubuntu:20.04:LTS: sqlite, Ubuntu:22.04:LTS: sqlite, Ubuntu:22.04:LTS: sqlite3 and 2 more</p> <p>Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: sqlite, Ubuntu:Pro:14.04:LTS: sqlite3, Ubuntu:Pro:16.04:LTS: sqlite3, Ubuntu:16.04:LTS: sqlite, Ubuntu:Pro:18.04:LTS: sqlite3, Ubuntu:18.04:LTS: sqlite, Ubuntu:Pro:20.04:LTS: sqlite3, Ubuntu:20.04:LTS: sqlite, Ubuntu:22.04:LTS: sqlite, Ubuntu:22.04:LTS: sqlite3 and 2 more</p> <p>Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-51304