Skip to content
OpenAdvisories
Medium USN-7751-1 1 CVE

sqlite3 vulnerability

Published Sep 15, 2025 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the FTS5 SQLite extension incorrectly calculated
certain array lengths. An attacker could use this issue to cause SQLite to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 24.04 LTS 24.04:LTS sqlite3 3.45.1-1ubuntu2.5

Vulnerabilities 1

  • Medium 6.9
    CVE-2025-7709

    Out Of Bounds write in FTS5 Extension in SQLite

    An integer overflow exists in the FTS5 https://sqlite.org/fts5.html  extension. It occurs when the size of an array of tombstone pointers is calculated and truncated into a 32-bit integer. A pointer to partially controlled data can then be written out of boun…

    SQLite FTS5 sqlite3 sqlite3 Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2025-7709