CVE-2026-51290

Name of the Vulnerable Software and Affected Versions SQLite version 3.41

Description A use-after-free issue exists in the shared cache lock management logic of the btree.c module. The program frees a BtLock structure without removing the corresponding node from the linked list. Consequently, subsequent linked list traversal accesses released memory, which can lead to a denial of service or the disclosure of sensitive memory information. This can be triggered by a specially crafted db-file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.