CVE-2026-51300

Name of the Vulnerable Software and Affected Versions SQLite version 3.41

Description An issue exists in the expression parsing and memory management logic. After the sqlite3ExprDelete() function is called to release an expression object, the program retains a dangling pointer and accesses member fields of the freed memory. A remote attacker can use malicious SQL queries to trigger invalid memory access, resulting in an application crash and the leakage of sensitive memory information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.