PT-2026-66522 · Undefined · Undefined

CVE-2026-51290 · Published 2026-07-30 · Updated 2026-07-30

Mitre

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

SQLite 3.41 has a use-after-free vulnerability in the shared cache lock management logic of the btree module. The program frees a BtLock structure without removing the node from the linked list. Subsequent linked list traversal accesses the released memory, which can lead to denial of service and sensitive memory information disclosure.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-51290

Affected Products

Undefined

References · 3

• 🔥 https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51290md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-51290 · Security Note
• https://github.com/sqlite/sqlite/blob/master/src/btree.c · Note