CVE-2026-51290

CVE-2026-51290CVE-2026-51290

Description

SQLite 3.41 has a use-after-free vulnerability in the shared cache lock management logic of the btree module. The program frees a BtLock structure without removing the node from the linked list. Subsequent linked list traversal accesses the released memory, which can lead to denial of service and sensitive memory information disclosure.

Scoring

CVSS 9.1 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Last modified2026-07-30
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.