Integer Overflow Vulnerability in SQLite FTS5 Extension

CVE-2025-7709

What is CVE-2025-7709?

An integer overflow vulnerability has been identified within the SQLite FTS5 extension. This specific flaw occurs due to the improper handling of the size of an array of tombstone pointers, which gets calculated and truncated into a 32-bit integer. As a result, an attacker may exploit this condition to write out of bounds to a pointer that can be partially controlled, potentially leading to unforeseen consequences in affected systems.

References