Vulnerability Details CVE-2025-7458
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.1%
CVSS Severity
CVSS v3 Score 9.1
References
Products affected by CVE-2025-7458
-
cpe:2.3:a:sqlite:sqlite:3.39.2
-
cpe:2.3:a:sqlite:sqlite:3.39.3
-
cpe:2.3:a:sqlite:sqlite:3.39.4
-
cpe:2.3:a:sqlite:sqlite:3.40.0
-
cpe:2.3:a:sqlite:sqlite:3.40.1
-
cpe:2.3:a:sqlite:sqlite:3.41.0
-
cpe:2.3:a:sqlite:sqlite:3.41.1