CVE-2025-6965

What it is

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

At a glance

Exploitability

Can be exploited over the network with a low-privilege account. High risk of data tampering.

Exploit odds

73.5% chance of exploitation in the next 30 days (EPSS). Higher than most.

Fix

A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

1. 2025-07-15 14:15 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-11-03 23:17 UTC Last updatedMost recent change to the record

Details

Published

2025-07-15 14:15 UTC

Last modified

2026-11-03 23:17 UTC

Exploit probability

73.5% · EPSS, next 30 days

Weakness

CWE-197

Record status

Modified

Affected

• Sqlite < 3.50.2
• Apple Ipados < 26.0.0
• Apple Iphone Os < 26.0.0
• Apple macOS < 26.0.0
• Apple Tvos < 26.0.0
• Apple Visionos < 26.0.0
• Apple Watchos < 26.0.0
• Siemens Ruggedcom Crossbow < 5.8

Attack profile CVSS 4.0 · 7.2

Attack vector

Network

Complexity

High

Attack requirements

Present

Privileges needed

Low

User interaction

None

Confidentiality

Low

Integrity

High

Availability

Low