Skip to content
Fencer Vulns
medium 5.6

CVE-2025-29088 json

In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (applica…

published 2025-04-10 19 mo ago modified 2026-10-15 25 d ago also BIT-sqlite-2025-29088 , EUVD-2025-10698

cvss
5.6
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 12%
public exploits
0
none known

Summary

In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). An sz*nBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect.

Patch / fix

  • SQLite SQLite 3.49.1
  • Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC) V5.7
  • Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.5
  • Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.5
  • Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP V3.1.5
  • sqlite3 Debian 14, Debian 13 3.46.1-4

debian advisories DEBIAN-CVE-2025-29088

  • sqlite3 Ubuntu 20.04 LTS 3.31.1-4ubuntu0.7
  • sqlite3 Ubuntu 22.04 LTS 3.37.2-2ubuntu0.4
  • sqlite3 Ubuntu 24.04 LTS 3.45.1-1ubuntu2.3
  • sqlite3 Ubuntu Pro 14.04 LTS 3.8.2-1ubuntu2.2+esm5
  • sqlite3 Ubuntu Pro 16.04 LTS 3.11.0-1ubuntu1.5+esm3
  • sqlite3 Ubuntu Pro 18.04 LTS 3.22.0-1ubuntu0.7+esm2

ubuntu advisories UBUNTU-CVE-2025-29088

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • sqlite3 SLE Module for Basesystem 15 SP7, SLE Module for Basesystem 15 SP6, SLE Micro 5.5 +19 more 3.49.1-150000.3.27.1
  • sqlite3 Linux Micro 6.1 3.49.1-slfo.1.1_1.1
  • sqlite3 Linux Micro 6.0 3.49.1-1.1
  • sqlite3 SLES LTSS Extended Security 12 SP5, SLES 12 SP5-LTSS 3.49.1-9.33.1

suse advisories SUSE-SU-2025:01456-2SUSE-SU-2025:01455-1SUSE-SU-2025:20395-1SUSE-SU-2025:01456-1SUSE-SU-2025:20323-1SUSE-SU-2025:1455-1

  • sqlite3 openSUSE Tumbleweed 3.49.1-3.1

opensuse advisories openSUSE-SU-2025:14991-1

  • sqlite Alpine 3.21 3.48.0-r4

alpine advisories ALPINE-CVE-2025-29088

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2025-29088 updated cvss 5.5

sqlite: Denial of Service in SQLite

  • Red Hat Enterprise Linux 6 lemon, sqlite, sqlite-tcl Red Hat Enterprise Linux 7 lemon, sqlite, sqlite-tcl
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat Enterprise Linux 8 npm, rls, rust, cargo, lemon, clippy, +21 more Red Hat Enterprise Linux 9 npm, rust, cargo, clippy, nodejs, sqlite, +14 more Red Hat Enterprise Linux 10 sqlite Red Hat OpenShift Container Platform 4 openshift/ose-rhel-coreos-8, openshift/ose-rhel-coreos-9
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-25-226-08 updated cvss 7.5

Siemens RUGGEDCOM CROSSBOW Station Access Controller

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
18 mo ago

Exploit prediction

0.22% chance of exploitation in the next 30 days, higher than 12% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
NVD 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
OSV 3.1 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Affected packages

ecosystem package affected fixed in
bitnami sqlite
>=3.49.0
 no fix listed

Affected products

  • SQLite SQLite
  • Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)
  • Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
  • Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
  • Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Classification

Weakness
  • CWE-190 Integer Overflow or Wraparound

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.