CVE-2025-29088

EUVD-2025-10698
In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). An sz*nBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.6 MEDIUM
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 11%
Affected Products (NVD)
VendorProductVersion
sqlitesqlite
3.49.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
sqlite3
bookworm
unimportant
bullseye
unimportant
bullseye (security)
unimportant
forky
3.46.1-9
fixed
sid
3.46.1-9
fixed
trixie
3.46.1-7+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sqlite
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
needs-triage
xenial
ignored
sqlite3
bionic
Fixed 3.22.0-1ubuntu0.7+esm2
released
focal
Fixed 3.31.1-4ubuntu0.7
released
jammy
Fixed 3.37.2-2ubuntu0.4
released
noble
Fixed 3.45.1-1ubuntu2.3
released
oracular
Fixed 3.46.1-1ubuntu0.2
released
plucky
Fixed 3.46.1-3ubuntu0.1
released
questing
not-affected
resolute
not-affected
trusty
Fixed 3.8.2-1ubuntu2.2+esm5
released
xenial
Fixed 3.11.0-1ubuntu1.5+esm3
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libsqlite3-0
suse enterprise desktop 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise desktop 15 SP7
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP3
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP4
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP5
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP7
3.49.1-150000.3.27.1
fixed
suse enterprise server 12 SP3
3.49.1-9.33.1
fixed
suse enterprise server 12 SP5
3.49.1-9.33.1
fixed
suse enterprise server 15 SP2
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP3
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP4
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP5
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP7
3.49.1-150000.3.27.1
fixed
libsqlite3-0-32bit
suse enterprise desktop 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise desktop 15 SP7
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP3
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP4
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP5
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP7
3.49.1-150000.3.27.1
fixed
suse enterprise server 12 SP3
3.49.1-9.33.1
fixed
suse enterprise server 12 SP5
3.49.1-9.33.1
fixed
suse enterprise server 15 SP2
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP3
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP4
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP5
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP7
3.49.1-150000.3.27.1
fixed
sqlite3
suse enterprise desktop 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise desktop 15 SP7
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP3
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP4
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP5
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP7
3.49.1-150000.3.27.1
fixed
suse enterprise server 12 SP3
3.49.1-9.33.1
fixed
suse enterprise server 12 SP5
3.49.1-9.33.1
fixed
suse enterprise server 15 SP2
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP3
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP4
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP5
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP7
3.49.1-150000.3.27.1
fixed
sqlite3-devel
suse enterprise desktop 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise desktop 15 SP7
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP3
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP4
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP5
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP7
3.49.1-150000.3.27.1
fixed
suse enterprise server 12 SP3
3.49.1-9.33.1
fixed
suse enterprise server 12 SP5
3.49.1-9.33.1
fixed
suse enterprise server 15 SP2
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP3
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP4
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP5
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP7
3.49.1-150000.3.27.1
fixed
sqlite3-tcl
suse enterprise desktop 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise desktop 15 SP7
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP3
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP4
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP5
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise sap 15 SP7
3.49.1-150000.3.27.1
fixed
suse enterprise server 12 SP3
3.49.1-9.33.1
fixed
suse enterprise server 12 SP5
3.49.1-9.33.1
fixed
suse enterprise server 15 SP2
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP3
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP4
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP5
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP6
3.49.1-150000.3.27.1
fixed
suse enterprise server 15 SP7
3.49.1-150000.3.27.1
fixed
Common Weakness Enumeration
References
https://gist.github.com/ylwango613/d3883fb9f6ba8a78086356779ce88248
https://github.com/sqlite/sqlite/commit/56d2fd008b108109f489339f5fd55212bb50afd4
https://sqlite.org/forum/forumpost/48f365daec
https://sqlite.org/releaselog/3_49_1.html
https://www.sqlite.org/cves.html