CVE-2025-6965

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

Affected products

Alt Linux, Almalinux, Astra Linux, Centos, Debian, Ibm Aix, Linuxmint, Apple Macos

Sqlite

< 3.50.2

Fix

Available

CVSS 3.1

7.7 HIGH

EPSS

75.8% (99th percentile)

Weakness

CWE-197

NVD status

Analyzed

Published

2025-07-15

Attack patterns

CAPEC-679