CVE-2026-51290
CRITICALSQLite < 3.41 - Use-After-Free in Shared Cache Lock Management via BtLock Linked List Traversal
Title source: llmDescription
SQLite 3.41 has a use-after-free vulnerability in the shared cache lock management logic of the btree module. The program frees a BtLock structure without removing the node from the linked list. Subsequent linked list traversal accesses the released memory, which can lead to denial of service and sensitive memory information disclosure.
Scores
CVSS v3
9.1
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-416
Status
published
Published
Jul 30, 2026
Tracked Since
Jul 30, 2026