Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2025-6965

HIGH7.2

Integer Truncation on SQLite

Published Jul 15, 2025

Modified 2 months ago

No fix available

Details

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

References

WEBhttp://seclists.org/fulldisclosure/2025/Sep/49 WEBhttp://seclists.org/fulldisclosure/2025/Sep/53 WEBhttp://seclists.org/fulldisclosure/2025/Sep/56 WEBhttp://seclists.org/fulldisclosure/2025/Sep/57 WEBhttp://seclists.org/fulldisclosure/2025/Sep/58 WEBhttp://www.openwall.com/lists/oss-security/2025/09/06/1 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-6965 WEBhttps://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8

CVSS Analysis

CVSS v4.0

7.2

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Attack Requirements

PresentAT:P

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Vulnerable System

Vuln. Confidentiality

LowVC:L

Vuln. Integrity

HighVI:H

Vuln. Availability

LowVA:L

Subsequent System

Subseq. Confidentiality

LowSC:L

Subseq. Integrity

HighSI:H

Subseq. Availability

LowSA:L

7.2/CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green

Weakness Type (CWE)

Other

Ecosystems

Timeline

PublishedJul 15, 2025

ModifiedNov 4, 2025

CVE-2025-6965 | Mondoo Vulnerability Intelligence