CVE-2025-6965
Integer Truncation on SQLite
CVSS Score
0.0
EPSS Score
1.5%
EPSS Percentile
81th
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
| CWE | CWE-197 |
| Vendor | sqlite |
| Product | sqlite |
| Published | Jul 15, 2025 |
| Last Updated | Apr 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for sqlite sqlite
Be the first to know when new unknown vulnerabilities affecting sqlite sqlite are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
SQLite / SQLite
0 < 3.50.2
References
sqlite.org: https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8 seclists.org: http://seclists.org/fulldisclosure/2025/Sep/57 seclists.org: http://seclists.org/fulldisclosure/2025/Sep/56 seclists.org: http://seclists.org/fulldisclosure/2025/Sep/53 seclists.org: http://seclists.org/fulldisclosure/2025/Sep/58 seclists.org: http://seclists.org/fulldisclosure/2025/Sep/49 openwall.com: http://www.openwall.com/lists/oss-security/2025/09/06/1 cert-portal.siemens.com: https://cert-portal.siemens.com/productcert/html/ssa-485750.html cert-portal.siemens.com: https://cert-portal.siemens.com/productcert/html/ssa-225816.html
Credits
Vlad Stolyarov of Google's Threat Analysis Group, with assistance from Google Big Sleep