Vulnerability/
BIT-sqlite-2025-6965

BIT-sqlite-2025-6965: Integer Truncation on SQLite

Q: Which SQLite versions need to be remediated?

SQLite versions before 3.50.2 are affected. Upgrade to SQLite 3.50.2 or later.

Q: What condition triggers the issue?

The issue can occur when the number of aggregate terms exceeds the number of available columns, leading to memory corruption.

Published Jul 15, 2025

Updated

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

Affected Software

1 affected component

SQLite SQLite<3.50.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade SQLite to a version that resolves this vulnerability.
Fixed in 3.50.2

Event History

Jul 15, 2025

CVE Published

via OSV·01:44 PM

Data Sourced

via OSV·01:44 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which SQLite versions need to be remediated?

SQLite versions before 3.50.2 are affected. Upgrade to SQLite 3.50.2 or later.

What condition triggers the issue?

The issue can occur when the number of aggregate terms exceeds the number of available columns, leading to memory corruption.

CVSS Score

7.2High

High Severity

AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green

Security Metrics

Risk Score52

Severityhigh(7.2)

CWE

19789

Timeline

PublishedJul 15, 2025

Updated

References

Tags

agent/severityagent/sourceagent/first-publish-dateagent/titleagent/referencesagent/weaknessagent/typeagent/descriptionagent/eventagent/risk-scoreagent/remedycollector/osv-vulnerabilitysource/OSValias/BIT-sqlite-2025-6965alias/GHSA-2m69-gcr7-jv3qanchor-related/ALSA-2025:11803anchor-related/ALSA-2025:11933anchor-related/ALSA-2025:11992anchor-related/ALSA-2025:12010anchor-related/ALSA-2025:14101anchor-related/ALSA-2025:20936anchor-related/SUSE-SU-2025:02672-1anchor-related/SUSE-SU-2025:02744-1anchor-related/SUSE-SU-2025:20561-1anchor-related/SUSE-SU-2025:20674-1anchor-related/openSUSE-SU-2025:15368-1agent/last-modified-dateagent/guess-aiagent/tagsagent/softwarecombinevendor/sqlitecanonical/sqlite sqlite

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.