Executive brief
SQLite, a widely used database engine, contains a memory handling flaw when processing specially crafted database files. If an application using the vulnerable version of SQLite opens a malicious database file, it could lead to a program crash or the unintended exposure of sensitive information from the computer's memory. This could disrupt operations or leak data if users are tricked into opening untrusted files.
Technical details
A memory corruption vulnerability exists in the btree.c module of SQLite 3.41.0. The vulnerability stems from two related issues: a use-after-free in the shared cache lock management where a BtLock structure is freed without being removed from a linked list, and insufficient boundary checking for B-tree page offset values. An attacker can exploit this by providing a specially crafted .db file. When the library parses this file, it performs invalid memory read/write operations during page traversal. This can result in a denial of service (application crash) or sensitive memory information disclosure. As of the advisory date, a fix is pending.
Affected products
- SQLite Consortium SQLite 3.41.0
Timeline
- 2026-07-30: disclosed
- 2026-07-30: advisory