There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
CVE-2025-6965
CVSS base score
7.7 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-197
Last modified
November 3, 2026
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
Affected products
sqlite sqlite
apple ipados
apple iphone os
apple macos
apple tvos
apple visionos
apple watchos
siemens ruggedcom crossbow
siemens sidis prime
References
- www.sqlite.org Patch
- seclists.org Third Party Advisory
- seclists.org Third Party Advisory
- seclists.org Third Party Advisory
- seclists.org Third Party Advisory
- seclists.org Third Party Advisory
- www.openwall.com Third Party Advisory
- cert-portal.siemens.com Third Party Advisory
- cert-portal.siemens.com Third Party Advisory
- cert-portal.siemens.com