Vulnerabilities > CVE-2024-0232 - Use After Free vulnerability in multiple products

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
sqlite
redhat
fedoraproject
CWE-416
NVD
Published: 2024-01-16
Updated: 2024-11-21

Summary

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

Vulnerable Configurations

Part Description Count
Application
Sqlite
2
Application
Fedoraproject
1
OS
Redhat
2
OS
Fedoraproject
1

Common Weakness Enumeration (CWE)

References