CVE-2025-29088

Katalog CVE

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan Integer Overflow or Wraparound pada sqlite. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). An sz*nBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect.

Rincian

Terbit di NVD

10 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.sqlite.org/cves.html advisory vendor
• https://github.com/sqlite/sqlite/commit/56d2fd008b108109f489339f5fd55212bb50afd4 patch
• https://gist.github.com/ylwango613/d3883fb9f6ba8a78086356779ce88248 advisory pihak ketiga
• https://sqlite.org/forum/forumpost/48f365daec advisory pihak ketiga
• https://sqlite.org/releaselog/3_49_1.html release notes