CVE Catalog

CVE-2025-6965

HighCVSS 7.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
64.89%

99th percentile - higher than 99% of all known CVEs

Summary

In SQLite before version 3.50.2, there is a vulnerability where the number of aggregate terms could exceed the number of available columns, leading to memory corruption.

Risk Assessment

An attacker could exploit this vulnerability to cause application crashes or potentially execute arbitrary code in the context of the process using SQLite.

Recommendation

Immediately upgrade SQLite to version 3.50.2 or later.

Original NVD description (English source)

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS