CVE-2026-54620

Published: Lug 28, 2026 Last Modified: Lug 28, 2026

ExploitDB:

Other exploit source:

Google Dorks:

LOW 2,0

Source: [email protected]

Attack Vector: local

Attack Complexity: high

Privileges Required: low

User Interaction: none

Confidentiality: N/A

Integrity: N/A

Availability: N/A

Description

AI Translation Available

sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is fixed in version 2.9.5.

416

Use After Free

Stable

Abstraction: Variant Structure: Simple

Common Consequences

Security Scopes Affected:

Integrity Availability Confidentiality

Potential Impacts:

Modify Memory Dos: Crash, Exit, Or Restart Read Memory Execute Unauthorized Code Or Commands

Applicable Platforms

Languages: Memory-Unsafe, C, C++

Likelihood of Exploit: High

View CWE Details

https://github.com/sparklemotion/sqlite3-ruby/commit/b24e1e…

https://github.com/sparklemotion/sqlite3-ruby/commit/b24e1e6076528b7f95f99acf7a…

https://github.com/sparklemotion/sqlite3-ruby/pull/711

https://github.com/sparklemotion/sqlite3-ruby/pull/711

https://github.com/sparklemotion/sqlite3-ruby/releases/tag/…

https://github.com/sparklemotion/sqlite3-ruby/releases/tag/v2.9.5

https://github.com/sparklemotion/sqlite3-ruby/security/advi…

https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-j7fr-3v8…