diff --git a/Cargo.lock b/Cargo.lock
index 9c16969..cc7abf7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -951,14 +951,14 @@ checksum = "1b6b67fb9a61334225b5b790716f609cd58395f895b3fe8b328786812a40bc3b"
 
 [[package]]
 name = "sqlite-core"
-version = "0.10.2"
+version = "0.10.3"
 dependencies = [
  "forensicnomicon",
 ]
 
 [[package]]
 name = "sqlite-forensic"
-version = "0.10.2"
+version = "0.10.3"
 dependencies = [
  "forensic-carve",
  "forensicnomicon",
@@ -969,7 +969,7 @@ dependencies = [
 
 [[package]]
 name = "sqlite4n6"
-version = "0.10.2"
+version = "0.10.3"
 dependencies = [
  "blob-decoder",
  "calamine",
diff --git a/Cargo.toml b/Cargo.toml
index f2bc254..635dd81 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -5,7 +5,7 @@ members = ["core", "forensic", "cli"]
 # Single source of truth for fields shared by every member (DRY): bump version /
 # edition / license here once; members inherit via `field.workspace = true`.
 [workspace.package]
-version = "0.10.2"
+version = "0.10.3"
 edition = "2021"
 license = "Apache-2.0"
 
@@ -13,9 +13,9 @@ license = "Apache-2.0"
 # KNOWLEDGE-layer format constants + the shared report model (Severity/Observation).
 forensicnomicon = "1"
 # The native reader, consumed by the forensic analyzer.
-sqlite-core = { version = "0.10.1", path = "core" }
+sqlite-core = { version = "0.10.3", path = "core" }
 # The anomaly auditor, consumed by the sqlite4n6 CLI.
-sqlite-forensic = { version = "0.10.2", path = "forensic" }
+sqlite-forensic = { version = "0.10.3", path = "forensic" }
 # CLI argument parsing.
 clap = { version = "4", features = ["derive"] }
 # SHA-256 content hashing for recovered BLOBs (RustCrypto — audited, never hand-rolled).
diff --git a/core/CHANGELOG.md b/core/CHANGELOG.md
index 78182e8..bce15fe 100644
--- a/core/CHANGELOG.md
+++ b/core/CHANGELOG.md
@@ -1,5 +1,20 @@
 # Changelog
 
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.10.3](https://github.com/SecurityRonin/sqlite-forensic/compare/sqlite-core-v0.10.2...sqlite-core-v0.10.3) - 2026-07-25
+
+### Fixed
+
+- cap overflow-payload alloc against untrusted payload_len (fuzz alloc bomb)
+- free_regions guards lo>=hi (clamp panicked on inverted range; fuzz-found panic-free violation)
+# Changelog
+
 All notable changes to `sqlite-core` are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
diff --git a/forensic/CHANGELOG.md b/forensic/CHANGELOG.md
index 671e2b4..606aee9 100644
--- a/forensic/CHANGELOG.md
+++ b/forensic/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.10.3](https://github.com/SecurityRonin/sqlite-forensic/compare/sqlite-forensic-v0.10.2...sqlite-forensic-v0.10.3) - 2026-07-25
+
+### Fixed
+
+- cap overflow-payload alloc against untrusted payload_len (fuzz alloc bomb)
+
 ## [0.10.2](https://github.com/SecurityRonin/sqlite-forensic/compare/sqlite-forensic-v0.10.1...sqlite-forensic-v0.10.2) - 2026-07-23
 
 ### Added