Integer Overflow Vulnerability in SQLite Versions 3.39.2 to 3.41.1
CVE-2025-7458

6.9MEDIUM

Key Information:

Vendor

Sqlite

Status
Sqlite
Vendor
CVE Published:
29 July 2025

What is CVE-2025-7458?

An integer overflow vulnerability exists in the sqlite3KeyInfoFromExprList function of SQLite, affecting versions from 3.39.2 to 3.41.1. This flaw allows attackers, who can execute arbitrary SQL statements, to formulate SELECT queries that utilize a large number of expressions in the ORDER BY clause. Exploiting this vulnerability can lead to Denial of Service conditions or the exposure of sensitive data stored in the process memory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SQLite 3.39.2 < 3.41.2

References

https://sqlite.org/forum/forumpost/16ce2bb7a639e29b
https://sqlite.org/src/info/12ad822d9b827777
patch

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

sec.r1nd0@gmail.com
JSON
.