https://seclists.org/oss-sec/2025/q3/149: SQLite: Integer truncation in findOrCateAggInfoColumn [CVE-2025-6965]
Published Sep 6, 2025
·Updated
Affected Software
1 affected component
SQLite SQLite<3.50.2
Frequently Asked Questions
1
What is the severity of CVE-2025-6965?
CVE-2025-6965 has a severity rating that reflects the potential impact of an integer overflow vulnerability allowing an attacker to read off the end of an array.
2
How do I fix CVE-2025-6965?
To fix CVE-2025-6965, upgrade your SQLite installation to version 3.50.2 or later.
3
What is the cause of CVE-2025-6965?
CVE-2025-6965 is caused by an integer truncation vulnerability in the findOrCateAggInfoColumn function in SQLite.
4
Who is affected by CVE-2025-6965?
Any application that allows arbitrary SQL statement injections and uses vulnerable versions of SQLite is at risk from CVE-2025-6965.
5
When was CVE-2025-6965 published?
CVE-2025-6965 was published on September 6, 2025.