Log in Start free

Vulnerability · Published Jul 28, 2026 · Assigned by GitHub_M

CVE-2026-54619sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity

Low 2.0

In plain English

A low-severity use-after-free in sqlite3-ruby from sparklemotion. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)2.0Low
Exploit odds (30 days)0.1%top 96.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is fixed in version 2.9.5.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12ruby-sqlite3no fix listedDEBIAN-CVE-2026-54619
Debian:13ruby-sqlite3no fix listedDEBIAN-CVE-2026-54619
Debian:14ruby-sqlite32.9.5-1DEBIAN-CVE-2026-54619
RubyGemssqlite32.9.5GHSA-28hh-pr2h-2w89
RubyGemssqlite3-ruby2.9.5GHSA-28hh-pr2h-2w89
Ubuntu:22.04:LTSruby-sqlite3no fix listedUBUNTU-CVE-2026-54619
Ubuntu:24.04:LTSruby-sqlite3no fix listedUBUNTU-CVE-2026-54619
Ubuntu:26.04:LTSruby-sqlite3no fix listedUBUNTU-CVE-2026-54619
Ubuntu:26.10ruby-sqlite3no fix listedUBUNTU-CVE-2026-54619

Affected products (as reported)

VendorProductVersions
sparklemotion sqlite3-ruby < 2.9.5

Weakness: CWE-416 · Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

References