Integer Overflow Vulnerability in SQLite Versions 3.39.2 to 3.41.1
CVE-2025-7458
6.9MEDIUM
What is CVE-2025-7458?
An integer overflow vulnerability exists in the sqlite3KeyInfoFromExprList function of SQLite, affecting versions from 3.39.2 to 3.41.1. This flaw allows attackers, who can execute arbitrary SQL statements, to formulate SELECT queries that utilize a large number of expressions in the ORDER BY clause. Exploiting this vulnerability can lead to Denial of Service conditions or the exposure of sensitive data stored in the process memory.
Affected Version(s)
SQLite 3.39.2 < 3.41.2