CVE-2026-51302

Name of the Vulnerable Software and Affected Versions SQLite version 3.41

Description A use-after-free flaw exists in the expression evaluation logic. The sqlite3ReleaseTempReg() function improperly releases temporary register resources, which the exprComputeOperands() function subsequently accesses. A remote attacker can exploit this by providing a malicious SQL statement to cause a denial of service, leak sensitive information, or execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.