high9.8Public exploit code
CVE-2025-6965
SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SQLite 3.50.1 - Heap Overflow2026-04-08 · local · windows
Impact
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | SQLitePCLRaw.lib.e_sqlite3 | <= 2.1.11 | none recorded |
| nuget | SQLitePCLRaw.lib.e_sqlite3.android | <= 2.1.11 | none recorded |
| nuget | SQLitePCLRaw.lib.e_sqlite3.ios | <= 2.1.11 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sqlite | Sqlite | before 3.50.2 |
| Apple | Ipados | before 26.0.0 |
| Apple | Iphone Os | before 26.0.0 |
| Apple | Macos | before 26.0.0 |
| Apple | Tvos | before 26.0.0 |
| Apple | Visionos | before 26.0.0 |
| Apple | Watchos | before 26.0.0 |
| Siemens | Ruggedcom Crossbow | before 5.8 |
| Siemens | Sidis Prime | before 4.0.800 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8
- http://seclists.org/fulldisclosure/2025/Sep/49
- http://seclists.org/fulldisclosure/2025/Sep/53
- http://seclists.org/fulldisclosure/2025/Sep/56
- http://seclists.org/fulldisclosure/2025/Sep/57
- http://seclists.org/fulldisclosure/2025/Sep/58
- http://www.openwall.com/lists/oss-security/2025/09/06/1
- https://cert-portal.siemens.com/productcert/html/ssa-225816.html
- https://cert-portal.siemens.com/productcert/html/ssa-485750.html
- https://cert-portal.siemens.com/productcert/html/ssa-765416.html
- https://github.com/advisories/GHSA-2m69-gcr7-jv3q
- https://nvd.nist.gov/vuln/detail/CVE-2025-6965
- https://github.com/google/security-research/security/advisories/GHSA-qj7j-3jp8-8ccv
- https://github.com/github/advisory-database/pull/7675