What is CVE-2026-51304?
CVE-2026-51304 is a use-after-free (UAF) vulnerability in the ORDER BY clause parsing routine of SQLite 3.41, caused by accessing memory after it has been freed via sqlite3ExprListDelete(). Users should upgrade the SQLite library to the latest version.
Azərbaycanca: CVE-2026-51304 SQLite 3.41 versiyasında ORDER BY ifadəsinin təhlili zamanı yaranan use-after-free (UAF) zəifliyidir. Bu, sqlite3ExprListDelete() ilə yaddaş azad edildikdən sonra həmin yaddaşa müraciət nəticəsində baş verir. İstifadəçilər SQLite kitabxanasını ən son versiyaya yeniləməlidir.
Related CVEs
link basis: same weakness class CWE-416
FAQ2
Which version of SQLite is affected by CVE-2026-51304?
CVE-2026-51304 affects SQLite version 3.41.
What happens when CVE-2026-51304 is exploited?
A use-after-free (UAF) vulnerability occurs when memory is accessed after being freed via sqlite3ExprListDelete() during ORDER BY clause parsing.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.