CVE-2025-6965

Katalog CVE

CVSS 7.7 · High EPSS 71,4%

Kerentanan Numeric Truncation Error pada sqlite, apple ipados +7 lainnya. Skor CVSS 3.1 7.7 (High) menurut NVD.

Deskripsi (NVD)

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

Rincian

Terbit di NVD

15 Juli 2025

Terakhir diubah

26 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.7 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-197: Numeric Truncation Error

EPSS (30 hari)

71,4% peluang dieksploitasi; lebih tinggi dari 99,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8 patch
• http://seclists.org/fulldisclosure/2025/Sep/49 advisory pihak ketiga
• http://seclists.org/fulldisclosure/2025/Sep/53 advisory pihak ketiga
• http://seclists.org/fulldisclosure/2025/Sep/56 advisory pihak ketiga
• http://seclists.org/fulldisclosure/2025/Sep/57 advisory pihak ketiga
• http://seclists.org/fulldisclosure/2025/Sep/58 advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2025/09/06/1 advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/html/ssa-225816.html advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/html/ssa-485750.html advisory pihak ketiga