CVE-2026-51303 Details

A use-after-free vulnerability has been identified in SQLite versions through 3.51.2, specifically within the expression parsing component. The issue arises in the ExprListDelete function, where the program frees an ExprList object but fails to clear references to the freed child Expr nodes. This oversight allows for subsequent access to deallocated memory, creating a dangling pointer situation. An attacker can exploit this vulnerability by sending specially crafted SQL queries that trigger the premature deallocation of expression nodes. The exploitation of this vulnerability can lead to application crashes, unauthorized access to sensitive memory information, and potentially arbitrary code execution within the context of the affected host process.

Users are advised to upgrade to SQLite version 3.51.3 or later, where this vulnerability has been addressed. The patch modifies the ExprListDelete function to properly invalidate references to freed objects, preventing the use-after-free condition.