vulnerability

FreeBSD: VID-42ec2207-7e85-11ef-89a4-b42e991fc52e (CVE-2024-0232): sqlite -- use-after-free bug in jsonparseaddnodearray

Severity
4
CVSS
(AV:L/AC:H/Au:N/C:N/I:N/A:C)
Published
Sep 29, 2024
Added
Oct 1, 2024
Modified
Dec 10, 2025

Description

[email protected] reports: A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

Solutions

freebsd-upgrade-package-sqlite3freebsd-upgrade-package-linux-rl9-sqlitefreebsd-upgrade-package-linux-c7-sqlite
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.