CVE-2025-7458
SQLite integer overflow in key info allocation may lead to information disclosure.
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
SQLite integer overflow in key info allocation may lead to information disclosure.
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
Reserved 2025-07-11 | Published 2025-07-29 | Updated 2025-07-29 | Assigner GoogleCWE-190 Integer Overflow or Wraparound
sec.r1nd0@gmail.com
sqlite.org/forum/forumpost/16ce2bb7a639e29b
sqlite.org/src/info/12ad822d9b827777
Support options
