CVE-2026-51300
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Jul 27, 2026
Vendor
unknown
Description
A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite 3.41. After invoking sqlite3ExprDelete to release an expression object, the program still retains the dangling pointer and subsequently accesses member fields of the already freed memory. By constructing malicious SQL queries, a remote attacker can trigger invalid memory access, leading to application crash and sensitive memory information leakage.