CVE-2025-6965

Integer Truncation on SQLite

Published Jul 15, 2025 CVSS 4.0 · 7.2 High EPSS 73.5% KEV · Not listed
Description
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-21441 There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Github GHSA Github GHSA GHSA-2m69-gcr7-jv3q SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite
Ubuntu USN Ubuntu USN USN-7676-1 SQLite vulnerability
Ubuntu USN Ubuntu USN USN-7679-1 SQLite vulnerabilities
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
CPEs cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 7.7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L'}

cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Type Values Removed Values Added
Metrics epss

{'score': 0.00042}

Type Values Removed Values Added
References
Metrics threat_severity

None

cvssV3_1

{'score': 7.7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L'}

threat_severity

Important

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Title Integer Truncation on SQLite
Weaknesses CWE-197
References
Metrics cvssV4_0

{'score': 7.2, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Google
Published
Updated
Nov 3, 2026, 10:13 PM
Reserved
Jul 1, 2025, 9:19 AM
Status
Modified
Published
Jul 15, 2025, 2:15 PM
Modified
Nov 3, 2026, 11:17 PM
Severity
Important
Public date
Jul 15, 2025, 1:44 PM