CVE-2025-7458
SQLite integer overflow in key info allocation may lead to information disclosure.
Summary
SQLite integer overflow in key info allocation may lead to information disclosure.
Original description
The description as published by the source.
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
Affected packages
Bitnami
sqlite
[{"type":"SEMVER","events":[{"introduced":"3.39.2"},{"fixed":"3.41.2"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-7458 sqlite3
References
- patch sqlite.org
- report sqlite.org
- web nvd.nist.gov