CVE-2025-29087

In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer overflow occurs in calculating the size of the result buffer, and thus malloc may not allocate enough memory.

Affected products

Alt Linux, Debian, Ibm Aix, Linuxmint, Red Os, Sqlite, Suse, Ubuntu

Sqlite

< 3.49.1

CVSS 3.1

7.5 HIGH

EPSS

0.5% (39th percentile)

Weakness

CWE-190

NVD status

Analyzed

Published

2025-04-07

No exploit for CVE-2025-29087 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.