CVE-2026-51303

Name of the Vulnerable Software and Affected Versions SQLite version 3.41

Description A use-after-free (UAF) issue exists in the core parsing component. The flaw occurs when the program frees an ExprList object using the sqlite3ExprListDelete() function and subsequently accesses the dangling pointer of the released object. A remote adversary can trigger this by providing specially crafted SQL queries during statement parsing. This may lead to an application crash, leakage of sensitive memory information, or arbitrary code execution on the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.