Skip to content
Fencer Vulns
high 7.7

CVE-2025-6965 in the critical feed json

Integer Truncation on SQLite

published 2025-07-15 15 mo ago modified 2026-11-03 5 d ago also BIT-sqlite-2025-6965 , EUVD-2025-21441 , GHSA-2m69-gcr7-jv3q

cvss
7.7
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
73.5%
EPSS 73.5% chance of exploitation in 30 days, percentile 99.4%
public exploits
1
Exploit-DB

Summary

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

Patch / fix

  • SQLite SQLite 3.50.2
  • Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC) V5.8, V6.0
  • Siemens SIDIS Prime V4.0.800
  • sqlite3 Debian 12 3.40.1-2+deb12u2
  • sqlite3 Debian 14, Debian 13 3.46.1-7

debian advisories DEBIAN-CVE-2025-6965

  • sqlite3 Ubuntu 22.04 LTS 3.37.2-2ubuntu0.5
  • sqlite3 Ubuntu 24.04 LTS 3.45.1-1ubuntu2.4
  • sqlite3 Ubuntu 25.10 3.46.1-6ubuntu1
  • sqlite3 Ubuntu Pro 14.04 LTS 3.8.2-1ubuntu2.2+esm5
  • sqlite3 Ubuntu Pro 16.04 LTS 3.11.0-1ubuntu1.5+esm3
  • sqlite3 Ubuntu Pro 18.04 LTS 3.22.0-1ubuntu0.7+esm2
  • sqlite3 Ubuntu Pro 20.04 LTS 3.31.1-4ubuntu0.7+esm1

ubuntu advisories UBUNTU-CVE-2025-6965

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • sqlite RHEL 9 3.34.1-9.el9_7
  • sqlite-libs RHEL 9 3.34.1-9.el9_7
  • mingw-sqlite RHEL 8 3.26.0.0-2.el8_10
  • mingw32-sqlite RHEL 8 3.26.0.0-2.el8_10
  • mingw64-sqlite RHEL 8 3.26.0.0-2.el8_10
  • sqlite RHEL 8 3.26.0-20.el8_10
  • lemon RHEL 8 3.26.0-20.el8_10
  • sqlite-libs RHEL 8 3.26.0-20.el8_10

red hat advisories RHSA-2026:0077RHSA-2026:0078RHSA-2026:0076RHSA-2026:0001RHSA-2025:20936RHSA-2025:14101

  • sqlite3 Linux Micro 6.1 3.50.2-slfo.1.1_1.1
  • sqlite3 Linux Micro 6.0 3.50.2-1.1
  • sqlite3 SLES for SAP 15 SP5, SLES for SAP 15 SP4, SLES for SAP 15 SP3 +19 more 3.50.2-150000.3.33.1
  • sqlite3 SLES LTSS Extended Security 12 SP5, SLES 12 SP5-LTSS 3.50.2-9.41.1

suse advisories SUSE-SU-2025:20674-1SUSE-SU-2025:20561-1SUSE-SU-2025:02744-1SUSE-SU-2025:02672-1

  • sqlite3 openSUSE Tumbleweed 3.50.3-1.1

opensuse advisories openSUSE-SU-2025:15368-1

  • sqlite AlmaLinux 9 3.34.1-9.el9_7
  • sqlite-libs AlmaLinux 9 3.34.1-9.el9_7
  • mingw32-sqlite AlmaLinux 8 3.26.0.0-2.el8_10
  • mingw64-sqlite AlmaLinux 8 3.26.0.0-2.el8_10
  • npm AlmaLinux 8 1:10.9.2-1.22.16.0.2.module_el8.10.0+4028+97ddca84
  • nodejs AlmaLinux 8 1:22.16.0-2.module_el8.10.0+4028+97ddca84
  • nodejs-libs AlmaLinux 8 1:22.16.0-2.module_el8.10.0+4028+97ddca84
  • nodejs-nodemon AlmaLinux 8 3.0.1-1.module_el8.10.0+3983+391a1a04

almalinux advisories ALSA-2025:20936ALSA-2025:14101ALSA-2025:11803ALSA-2025:11933ALSA-2025:11992ALSA-2025:12010

  • sqlite Rocky Linux 9 3.34.1-9.el9_7
  • sqlite Rocky Linux 9 3.34.1-8.el9_6
  • sqlite Rocky Linux 10 3.46.1-5.el10_0
  • mingw-sqlite Rocky Linux 8 3.26.0.0-2.el8_10
  • nodejs Rocky Linux 9 1:22.16.0-2.module+el9.6.0+32322+a8b1fd01
  • nodejs-nodemon Rocky Linux 9 3.0.1-1.module+el9.5.0+31770+0da7192d
  • nodejs-nodemon Rocky Linux 9 3.0.1-1.module+el9.6.0+32322+a8b1fd01
  • nodejs-nodemon Rocky Linux 9 3.0.1-1.module+el9.6.0+32045+2e5d342d

rocky linux advisories RLSA-2025:20936RLSA-2025:11992RLSA-2025:11933RLSA-2025:14101RLSA-2025:11802RLSA-2025:11803

  • sqlite Alpine 3.18 3.41.2-r4
  • sqlite Alpine 3.19 3.44.2-r2
  • sqlite Alpine 3.20 3.45.3-r3
  • sqlite Alpine 3.21 3.48.0-r3
  • sqlite Alpine 3.22 3.49.2-r1
  • qt6-qtwebengine Alpine 3.22 6.8.3-r4
  • qt6-qtwebengine Alpine 3.24, Alpine 3.23 6.10.0-r1

alpine advisories ALPINE-CVE-2025-6965

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • sqlite Azure Linux 3.0 3.44.0-2
  • sqlite CBL-Mariner 2.0 3.39.2-4

azure linux advisories AZL-65327AZL-65507

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2025-6965 updated cvss 7.7

sqlite: Integer Truncation in SQLite

  • Red Hat Enterprise Linux 6 lemon, sqlite, sqlite-tcl Red Hat Enterprise Linux 7 firefox
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat cert-manager operator for Red Hat OpenShift 1.16 cert-manager v1.16.5-1760515757
    fixed: vendor fix RHSA-2025:18219
  • Red Hat OpenShift Compliance Operator 1 compliance
    fixed: vendor fix RHSA-2025:21885
  • Red Hat OpenShift File Integrity Operator - FIO 1 compliance
    fixed: vendor fix RHSA-2025:21913
  • Red Hat Advanced Cluster Security 4.7 advanced-cluster-security
    fixed: vendor fix RHSA-2025:23248
  • Red Hat AI Inference Server 3.2 rhaiis 1772160593, rhaiis 1772160625, rhaiis 3.2.2-1764871796, rhaiis 3.2.2-1765379049, rhaiis 3.2.2-1765379088
    fixed: vendor fix RHSA-2025:23080
  • Red Hat Ceph Storage 7 rhceph
    fixed: vendor fix RHSA-2025:22529
  • Red Hat Ceph Storage 8 rhceph, rhceph 1769512383
    fixed: vendor fix RHSA-2025:22548
show 29 more
  • Red Hat Discovery 2 discovery 2.0.1-1754478727, discovery 2.4.0-1763596485, discovery 2.4.0-1763656152
    fixed: vendor fix RHSA-2025:21994
  • Red Hat Enterprise Linux AppStream (v. 8) lemon 3.26.0-20.el8_10, nodejs 22.16.0-2.module+el8.10.0+23338+c5a38893, nodejs-libs 22.16.0-2.module+el8.10.0+23338+c5a38893, nodejs-nodemon 3.0.1-1.module+el8.10.0+23140+4056b950, npm 10.9.2-1.22.16.0.2.module+el8.10.0+23338+c5a38893, nodejs-full-i18n 22.16.0-2.module+el8.10.0+23338+c5a38893, +2 more
    fixed: vendor fix RHSA-2025:12010
  • Red Hat Enterprise Linux AppStream (v. 9) sqlite 3.34.1-8.el9_6, sqlite 3.34.1-9.el9_7, nodejs 22.16.0-2.module+el9.6.0+23339+d3c8acfa, nodejs-libs 22.16.0-2.module+el9.6.0+23339+d3c8acfa, nodejs-nodemon 3.0.1-1.module+el9.6.0+23339+d3c8acfa, npm 10.9.2-1.22.16.0.2.module+el9.6.0+23339+d3c8acfa, +3 more
    fixed: vendor fix RHSA-2025:11992
  • Red Hat Enterprise Linux AppStream (v. 10) sqlite 3.46.1-5.el10_0
    fixed: vendor fix RHSA-2025:11933
  • Red Hat Enterprise Linux AppStream AUS (v. 8.2) lemon 3.26.0-6.el8_2.1, spice-client-win 8.10-3.el8_2.1, spice-client-win-x64 8.10-3.el8_2.1, spice-client-win-x86 8.10-3.el8_2.1
    fixed: vendor fix RHSA-2025:12901
  • Red Hat Enterprise Linux AppStream AUS (v.8.4) lemon 3.26.0-13.el8_4.1, spice-client-win 8.10-3.el8_4.1, spice-client-win-x64 8.10-3.el8_4.1, spice-client-win-x86 8.10-3.el8_4.1
    fixed: vendor fix RHSA-2025:12905
  • Red Hat Enterprise Linux AppStream AUS (v.8.6) lemon 3.26.0-16.el8_6.3, spice-client-win 8.10-3.el8_6.1, spice-client-win-x64 8.10-3.el8_6.1, spice-client-win-x86 8.10-3.el8_6.1 Red Hat Enterprise Linux AppStream E4S (v.8.6) lemon 3.26.0-16.el8_6.3, spice-client-win 8.10-3.el8_6.1, spice-client-win-x64 8.10-3.el8_6.1, spice-client-win-x86 8.10-3.el8_6.1
    fixed: vendor fix RHSA-2025:12904
  • Red Hat Enterprise Linux AppStream E4S (v.8.8) lemon 3.26.0-18.el8_8.2, spice-client-win 8.10-3.el8_8.1, spice-client-win-x64 8.10-3.el8_8.1, spice-client-win-x86 8.10-3.el8_8.1
    fixed: vendor fix RHSA-2025:12521
  • Red Hat Enterprise Linux AppStream E4S (v.9.0) sqlite 3.34.1-5.el9_0.1
    fixed: vendor fix RHSA-2025:12522
  • Red Hat Enterprise Linux AppStream E4S (v.9.2) sqlite 3.34.1-6.el9_2.2
    fixed: vendor fix RHSA-2025:12749
  • Red Hat Enterprise Linux AppStream EUS (v.9.4) sqlite 3.34.1-7.el9_4.1
    fixed: vendor fix RHSA-2025:12036
  • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) lemon 3.26.0-13.el8_4.1, spice-client-win 8.10-3.el8_4.1, spice-client-win-x64 8.10-3.el8_4.1, spice-client-win-x86 8.10-3.el8_4.1
    fixed: vendor fix RHSA-2025:12905
  • Red Hat Enterprise Linux AppStream TUS (v.8.6) lemon 3.26.0-16.el8_6.3, spice-client-win 8.10-3.el8_6.1, spice-client-win-x64 8.10-3.el8_6.1, spice-client-win-x86 8.10-3.el8_6.1
    fixed: vendor fix RHSA-2025:12904
  • Red Hat Enterprise Linux AppStream TUS (v.8.8) lemon 3.26.0-18.el8_8.2, spice-client-win 8.10-3.el8_8.1, spice-client-win-x64 8.10-3.el8_8.1, spice-client-win-x86 8.10-3.el8_8.1
    fixed: vendor fix RHSA-2025:12521
  • Red Hat Enterprise Linux BaseOS (v. 8) sqlite 3.26.0-20.el8_10, sqlite-libs 3.26.0-20.el8_10
    fixed: vendor fix RHSA-2025:12010
  • Red Hat Enterprise Linux BaseOS (v. 9) sqlite 3.34.1-8.el9_6, sqlite 3.34.1-9.el9_7, sqlite-libs 3.34.1-8.el9_6, sqlite-libs 3.34.1-9.el9_7
    fixed: vendor fix RHSA-2025:11992
  • Red Hat Enterprise Linux BaseOS (v. 10) sqlite 3.46.1-5.el10_0, sqlite-libs 3.46.1-5.el10_0
    fixed: vendor fix RHSA-2025:11933
  • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) sqlite 3.26.0-6.el8_2.1, sqlite-libs 3.26.0-6.el8_2.1
    fixed: vendor fix RHSA-2025:12901
  • Red Hat Enterprise Linux BaseOS AUS (v.8.4) sqlite 3.26.0-13.el8_4.1, sqlite-libs 3.26.0-13.el8_4.1
    fixed: vendor fix RHSA-2025:12905
  • Red Hat Enterprise Linux BaseOS AUS (v.8.6) sqlite 3.26.0-16.el8_6.3, sqlite-libs 3.26.0-16.el8_6.3 Red Hat Enterprise Linux BaseOS E4S (v.8.6) sqlite 3.26.0-16.el8_6.3, sqlite-libs 3.26.0-16.el8_6.3
    fixed: vendor fix RHSA-2025:12904
  • Red Hat Enterprise Linux BaseOS E4S (v.8.8) sqlite 3.26.0-18.el8_8.2, sqlite-libs 3.26.0-18.el8_8.2
    fixed: vendor fix RHSA-2025:12521
  • Red Hat Enterprise Linux BaseOS E4S (v.9.0) sqlite 3.34.1-5.el9_0.1, sqlite-libs 3.34.1-5.el9_0.1
    fixed: vendor fix RHSA-2025:12522
  • Red Hat Enterprise Linux BaseOS E4S (v.9.2) sqlite 3.34.1-6.el9_2.2, sqlite-libs 3.34.1-6.el9_2.2
    fixed: vendor fix RHSA-2025:12749
  • Red Hat Enterprise Linux BaseOS EUS (v.9.4) sqlite 3.34.1-7.el9_4.1, sqlite-libs 3.34.1-7.el9_4.1
    fixed: vendor fix RHSA-2025:12036
  • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) sqlite 3.26.0-13.el8_4.1, sqlite-libs 3.26.0-13.el8_4.1
    fixed: vendor fix RHSA-2025:12905
  • Red Hat Enterprise Linux BaseOS TUS (v.8.6) sqlite 3.26.0-16.el8_6.3, sqlite-libs 3.26.0-16.el8_6.3
    fixed: vendor fix RHSA-2025:12904
  • Red Hat Enterprise Linux BaseOS TUS (v.8.8) sqlite 3.26.0-18.el8_8.2, sqlite-libs 3.26.0-18.el8_8.2
    fixed: vendor fix RHSA-2025:12521
  • Red Hat Enterprise Linux CRB (v. 8) mingw-sqlite 3.26.0.0-2.el8_10, mingw32-sqlite 3.26.0.0-2.el8_10, mingw64-sqlite 3.26.0.0-2.el8_10
    fixed: vendor fix RHSA-2025:14101
  • Red Hat Enterprise Linux Server (v. 7 ELS) sqlite 3.7.17-9.el7_9.1
    fixed: vendor fix RHSA-2025:12349

15 more fixed, 10 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-26-295-15 updated cvss 7.7

Siemens RUGGEDCOM CROSSBOW Station Access Controller

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-26-141-03 updated cvss 9.8

ABB B&R Automation Studio

  • ABB B&R Automation Studio <6.5
    affected: vendor fix, mitigation
  • ABB B&R Automation Studio 6.5
    fixed

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-26-111-08 updated cvss 7.7

Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-26-071-03 updated cvss 7.7

Siemens SIDIS Prime

  • Siemens SIDIS Prime < 4.0.800
    affected: fixed in V4.0.800

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Timeline

  1. Published
  2. First public exploit (EDB-52499)

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
total
Assessed
6 mo ago

Exploit prediction

73.45% chance of exploitation in the next 30 days, higher than 99.4% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-52499 SQLite 3.50.1 - Heap Overflow local, 2026-04-08

CVSS scores

assigned by version score vector
CNA 4.0 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green
GitHub 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA 4.0 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green
NVD 3.1 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L

Affected packages

ecosystem package affected fixed in
nuget SQLitePCLRaw.lib.e_sqlite3
<=2.1.11
 no fix listed
nuget SQLitePCLRaw.lib.e_sqlite3.android
<=2.1.11
 no fix listed
nuget SQLitePCLRaw.lib.e_sqlite3.ios
<=2.1.11
 no fix listed
bitnami sqlite
all versions
 no fix listed

Affected products

  • SQLite SQLite
  • Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)
  • Siemens SIDIS Prime

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.