GHSA-p36r-6g67-869cHighCVSS 7.5
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite...
🔗 CVE IDs covered (1)
📋 Description
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2025-70873
- https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054
- https://sqlite.org/forum/forumpost/761eac3c82
- https://sqlite.org/src/info/3d459f1fb1bd1b5e
- https://cert-portal.siemens.com/productcert/html/ssa-765416.html
- https://github.com/advisories/GHSA-p36r-6g67-869c