CVE-2026-51290

CRITICAL

SQLite < 3.41 - Use-After-Free in Shared Cache Lock Management via BtLock Linked List Traversal

Title source: llm
STIX 2.1

Description

SQLite 3.41 has a use-after-free vulnerability in the shared cache lock management logic of the btree module. The program frees a BtLock structure without removing the node from the linked list. Subsequent linked list traversal accesses the released memory, which can lead to denial of service and sensitive memory information disclosure.

Scores

CVSS v3 9.1
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-416
Status published
Published Jul 30, 2026
Tracked Since Jul 30, 2026