ZeroDay Findings
Sign inSign up

Findings

CVE-2024-0232

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c.

Published Jan 16, 2024 · updated Oct 15, 2026 · sqlite sqlite

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 16, 2024 · NIST NVD

    Detected

    A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

  2. Oct 15, 2026 · NIST NVD

    Updated

    A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

Affected

  • cpe fedoraproject/extra packages for enterprise linux8.0
  • cpe fedoraproject/fedora39
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0
  • cpe sqlite/sqliteversion unspecified

Sources

  • CVE.orgCVE-2024-0232

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2024-0232

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDCVE-2024-0232

    A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial

    nvd.nist.gov

References