CVE-2026-51304

Name of the Vulnerable Software and Affected Versions sqlite version 3.41

Description A use-after-free (UAF) issue exists in the ORDER BY clause parsing routine. The system releases the memory of an ExprList object through the sqlite3ExprListDelete() function and subsequently attempts to access the nExpr member of that freed object. This dangling pointer access leads to invalid memory read operations. A remote adversary can trigger this by constructing a malicious SQL statement with an ORDER BY clause containing a large number of items, potentially resulting in an application crash, leakage of sensitive memory contents, or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.