CVE-2025-6965

EUVD-2025-21441
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.7 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
Affected Products (NVD)
VendorProductVersion
sqlitesqlite
𝑥
< 3.50.2
appleipados
𝑥
< 26.0.0
appleiphone_os
𝑥
< 26.0.0
applemacos
𝑥
< 26.0.0
appletvos
𝑥
< 26.0.0
applevisionos
𝑥
< 26.0.0
applewatchos
𝑥
< 26.0.0
siemensruggedcom_crossbow
𝑥
< 5.8
siemenssidis_prime
𝑥
< 4.0.800
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensRUGGEDCOM CROSSBOW Station Access Controller \(SAC\)
𝑥
< V5.8
ADP
SiemensSIDIS Prime
𝑥
< V4.0.800
ADP
Windows Releases
Platform
Version
Windows 10
1607 (x64, x86)
KB5073722
1809 (x64, x86)
KB5073723
21H2 (arm64, x64, x86)
KB5073724
22H2 (arm64, x64, x86)
KB5073724
Windows 11
23H2 (arm64, x64)
KB5073455
24H2 (arm64, x64)
KB5074109
25H2 (arm64, x64)
KB5074109
Windows Server 2016
Server Core
KB5073722
Standard
KB5073722
Windows Server 2019
Server Core
KB5073723
Standard
KB5073723
Windows Server 2022
23H2 Server Core
KB5073450
Server Core
KB5073457
Standard
KB5073457
Windows Server 2025
Server Core
KB5073379
Standard
KB5073379
Debian logo
Debian Releases
Debian Product
Codename
sqlite3
bookworm
3.40.1-2+deb12u2
fixed
bullseye
postponed
bullseye (security)
vulnerable
forky
3.46.1-9
fixed
sid
3.53.3-1
fixed
trixie
3.46.1-7+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sqlite
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
dne
plucky
dne
questing
dne
resolute
dne
trusty
not-affected
xenial
ignored
sqlite3
bionic
Fixed 3.22.0-1ubuntu0.7+esm2
released
focal
Fixed 3.31.1-4ubuntu0.7+esm1
released
jammy
Fixed 3.37.2-2ubuntu0.5
released
noble
Fixed 3.45.1-1ubuntu2.4
released
plucky
Fixed 3.46.1-3ubuntu0.2
released
questing
Fixed 3.46.1-6ubuntu1
released
resolute
Fixed 3.46.1-6ubuntu1
released
trusty
Fixed 3.8.2-1ubuntu2.2+esm5
released
xenial
Fixed 3.11.0-1ubuntu1.5+esm3
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libsqlite3-0
suse enterprise desktop 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise desktop 15 SP7
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP3
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP4
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP5
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP7
3.50.2-150000.3.33.1
fixed
suse enterprise server 12 SP3
3.50.2-9.41.1
fixed
suse enterprise server 12 SP5
3.50.2-9.41.1
fixed
suse enterprise server 15 SP2
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP3
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP4
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP5
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP7
3.50.2-150000.3.33.1
fixed
libsqlite3-0-32bit
suse enterprise desktop 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise desktop 15 SP7
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP3
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP4
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP5
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP7
3.50.2-150000.3.33.1
fixed
suse enterprise server 12 SP3
3.50.2-9.41.1
fixed
suse enterprise server 12 SP5
3.50.2-9.41.1
fixed
suse enterprise server 15 SP2
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP3
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP4
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP5
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP7
3.50.2-150000.3.33.1
fixed
sqlite3
suse enterprise desktop 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise desktop 15 SP7
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP3
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP4
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP5
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP7
3.50.2-150000.3.33.1
fixed
suse enterprise server 12 SP3
3.50.2-9.41.1
fixed
suse enterprise server 12 SP5
3.50.2-9.41.1
fixed
suse enterprise server 15 SP2
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP3
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP4
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP5
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP7
3.50.2-150000.3.33.1
fixed
sqlite3-devel
suse enterprise desktop 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise desktop 15 SP7
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP3
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP4
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP5
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP7
3.50.2-150000.3.33.1
fixed
suse enterprise server 12 SP3
3.50.2-9.41.1
fixed
suse enterprise server 12 SP5
3.50.2-9.41.1
fixed
suse enterprise server 15 SP2
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP3
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP4
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP5
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP7
3.50.2-150000.3.33.1
fixed
sqlite3-tcl
suse enterprise desktop 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise desktop 15 SP7
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP3
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP4
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP5
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise sap 15 SP7
3.50.2-150000.3.33.1
fixed
suse enterprise server 12 SP3
3.50.2-9.41.1
fixed
suse enterprise server 12 SP5
3.50.2-9.41.1
fixed
suse enterprise server 15 SP2
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP3
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP4
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP5
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP6
3.50.2-150000.3.33.1
fixed
suse enterprise server 15 SP7
3.50.2-150000.3.33.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
lemon
RHEL 8
0:3.26.0-20.el8_10
fixed
RHEL 8.2 AUS
0:3.26.0-6.el8_2.1
fixed
RHEL 8.4 AUS
0:3.26.0-13.el8_4.1
fixed
RHEL 8.6 AUS
0:3.26.0-16.el8_6.3
fixed
RHEL 8.6 E4S
0:3.26.0-16.el8_6.3
fixed
RHEL 8.6 TUS
0:3.26.0-16.el8_6.3
fixed
RHEL 8.8 E4S
0:3.26.0-18.el8_8.2
fixed
RHEL 8.8 TUS
0:3.26.0-18.el8_8.2
fixed
mingw32-sqlite
RHEL 8
0:3.26.0.0-2.el8_10
fixed
mingw32-sqlite-static
RHEL 8
0:3.26.0.0-2.el8_10
fixed
mingw64-sqlite
RHEL 8
0:3.26.0.0-2.el8_10
fixed
mingw64-sqlite-static
RHEL 8
0:3.26.0.0-2.el8_10
fixed
spice-client-win-x64
RHEL 8.2 AUS
0:8.10-3.el8_2.1
fixed
RHEL 8.4 AUS
0:8.10-3.el8_4.1
fixed
RHEL 8.6 AUS
0:8.10-3.el8_6.1
fixed
RHEL 8.6 E4S
0:8.10-3.el8_6.1
fixed
RHEL 8.6 TUS
0:8.10-3.el8_6.1
fixed
RHEL 8.8 E4S
0:8.10-3.el8_8.1
fixed
RHEL 8.8 TUS
0:8.10-3.el8_8.1
fixed
spice-client-win-x86
RHEL 8.2 AUS
0:8.10-3.el8_2.1
fixed
RHEL 8.4 AUS
0:8.10-3.el8_4.1
fixed
RHEL 8.6 AUS
0:8.10-3.el8_6.1
fixed
RHEL 8.6 E4S
0:8.10-3.el8_6.1
fixed
RHEL 8.6 TUS
0:8.10-3.el8_6.1
fixed
RHEL 8.8 E4S
0:8.10-3.el8_8.1
fixed
RHEL 8.8 TUS
0:8.10-3.el8_8.1
fixed
sqlite
RHEL 8
0:3.26.0-20.el8_10
fixed
RHEL 8.2 AUS
0:3.26.0-6.el8_2.1
fixed
RHEL 8.4 AUS
0:3.26.0-13.el8_4.1
fixed
RHEL 8.6 AUS
0:3.26.0-16.el8_6.3
fixed
RHEL 8.6 E4S
0:3.26.0-16.el8_6.3
fixed
RHEL 8.6 TUS
0:3.26.0-16.el8_6.3
fixed
RHEL 8.8 E4S
0:3.26.0-18.el8_8.2
fixed
RHEL 8.8 TUS
0:3.26.0-18.el8_8.2
fixed
RHEL 9
0:3.34.1-9.el9_7
fixed
sqlite-devel
RHEL 8
0:3.26.0-20.el8_10
fixed
RHEL 8.2 AUS
0:3.26.0-6.el8_2.1
fixed
RHEL 8.4 AUS
0:3.26.0-13.el8_4.1
fixed
RHEL 8.6 AUS
0:3.26.0-16.el8_6.3
fixed
RHEL 8.6 E4S
0:3.26.0-16.el8_6.3
fixed
RHEL 8.6 TUS
0:3.26.0-16.el8_6.3
fixed
RHEL 8.8 E4S
0:3.26.0-18.el8_8.2
fixed
RHEL 8.8 TUS
0:3.26.0-18.el8_8.2
fixed
RHEL 9
0:3.34.1-9.el9_7
fixed
sqlite-doc
RHEL 8
0:3.26.0-20.el8_10
fixed
RHEL 8.2 AUS
0:3.26.0-6.el8_2.1
fixed
RHEL 8.4 AUS
0:3.26.0-13.el8_4.1
fixed
RHEL 8.6 AUS
0:3.26.0-16.el8_6.3
fixed
RHEL 8.6 E4S
0:3.26.0-16.el8_6.3
fixed
RHEL 8.6 TUS
0:3.26.0-16.el8_6.3
fixed
RHEL 8.8 E4S
0:3.26.0-18.el8_8.2
fixed
RHEL 8.8 TUS
0:3.26.0-18.el8_8.2
fixed
sqlite-libs
RHEL 8
0:3.26.0-20.el8_10
fixed
RHEL 8.2 AUS
0:3.26.0-6.el8_2.1
fixed
RHEL 8.4 AUS
0:3.26.0-13.el8_4.1
fixed
RHEL 8.6 AUS
0:3.26.0-16.el8_6.3
fixed
RHEL 8.6 E4S
0:3.26.0-16.el8_6.3
fixed
RHEL 8.6 TUS
0:3.26.0-16.el8_6.3
fixed
RHEL 8.8 E4S
0:3.26.0-18.el8_8.2
fixed
RHEL 8.8 TUS
0:3.26.0-18.el8_8.2
fixed
RHEL 9
0:3.34.1-9.el9_7
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
cargo
Amazon Linux 2
0:1.86.0-1.amzn2.0.3
fixed
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
cargo-debuginfo
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
clippy
Amazon Linux 2
0:1.86.0-1.amzn2.0.3
fixed
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
clippy-debuginfo
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
lemon
Amazon Linux 2
0:3.7.17-8.amzn2.1.3
fixed
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
lemon-debuginfo
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
nodejs22
Amazon Linux 2023
1:22.18.0-1.amzn2023.0.1
fixed
nodejs22-debuginfo
Amazon Linux 2023
1:22.18.0-1.amzn2023.0.1
fixed
nodejs22-debugsource
Amazon Linux 2023
1:22.18.0-1.amzn2023.0.1
fixed
nodejs22-devel
Amazon Linux 2023
1:22.18.0-1.amzn2023.0.1
fixed
nodejs22-docs
Amazon Linux 2023
1:22.18.0-1.amzn2023.0.1
fixed
nodejs22-full-i18n
Amazon Linux 2023
1:22.18.0-1.amzn2023.0.1
fixed
nodejs22-libs
Amazon Linux 2023
1:22.18.0-1.amzn2023.0.1
fixed
nodejs22-libs-debuginfo
Amazon Linux 2023
1:22.18.0-1.amzn2023.0.1
fixed
nodejs22-npm
Amazon Linux 2023
1:10.9.3-1.22.18.0.1.amzn2023.0.1
fixed
rust
Amazon Linux 2
0:1.86.0-1.amzn2.0.3
fixed
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-analyzer
Amazon Linux 2
0:1.86.0-1.amzn2.0.3
fixed
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-analyzer-debuginfo
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-debugger-common
Amazon Linux 2
0:1.86.0-1.amzn2.0.3
fixed
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-debuginfo
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-debugsource
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-doc
Amazon Linux 2
0:1.86.0-1.amzn2.0.3
fixed
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-gdb
Amazon Linux 2
0:1.86.0-1.amzn2.0.3
fixed
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-lldb
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-src
Amazon Linux 2
0:1.86.0-1.amzn2.0.3
fixed
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-std-static
Amazon Linux 2
0:1.86.0-1.amzn2.0.3
fixed
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-std-static-wasm32-unknown-unknown
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-std-static-wasm32-wasip1
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-toolset
Amazon Linux 2
0:1.86.0-1.amzn2.0.3
fixed
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rust-toolset-srpm-macros
Amazon Linux 2
0:1.86.0-1.amzn2.0.3
fixed
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rustfmt
Amazon Linux 2
0:1.86.0-1.amzn2.0.3
fixed
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
rustfmt-debuginfo
Amazon Linux 2023
0:1.89.0-1.amzn2023.0.2
fixed
sqlite
Amazon Linux 2
0:3.7.17-8.amzn2.1.3
fixed
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
sqlite-analyzer
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
sqlite-analyzer-debuginfo
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
sqlite-debuginfo
Amazon Linux 2
0:3.7.17-8.amzn2.1.3
fixed
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
sqlite-debugsource
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
sqlite-devel
Amazon Linux 2
0:3.7.17-8.amzn2.1.3
fixed
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
sqlite-doc
Amazon Linux 2
0:3.7.17-8.amzn2.1.3
fixed
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
sqlite-libs
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
sqlite-libs-debuginfo
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
sqlite-tcl
Amazon Linux 2
0:3.7.17-8.amzn2.1.3
fixed
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
sqlite-tcl-debuginfo
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
sqlite-tools
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
sqlite-tools-debuginfo
Amazon Linux 2023
0:3.40.0-1.amzn2023.0.6
fixed
thunderbird
Amazon Linux 2
0:128.11.1-1.amzn2.0.2
fixed
thunderbird-debuginfo
Amazon Linux 2
0:128.11.1-1.amzn2.0.2
fixed
v8-12.4-devel
Amazon Linux 2023
3:12.4.254.21-1.22.18.0.1.amzn2023.0.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
sqlite
Azure Linux 3.0
0:3.44.0-2.azl3
fixed
CBL-Mariner 2.0
0:3.39.2-4.cm2
fixed
Common Weakness Enumeration
References
https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8
http://seclists.org/fulldisclosure/2025/Sep/49
http://seclists.org/fulldisclosure/2025/Sep/53
http://seclists.org/fulldisclosure/2025/Sep/56
http://seclists.org/fulldisclosure/2025/Sep/57
http://seclists.org/fulldisclosure/2025/Sep/58
http://www.openwall.com/lists/oss-security/2025/09/06/1
https://cert-portal.siemens.com/productcert/html/ssa-225816.html
https://cert-portal.siemens.com/productcert/html/ssa-485750.html