CVE-2025-6965
HighPublic exploitThere exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.
Published Jul 15, 2025 · Updated Oct 16, 2026 · Also known as ALPINE-CVE-2025-6965, BIT-sqlite-2025-6965, DEBIAN-CVE-2025-6965, GHSA-2m69-gcr7-jv3q, ROOT-OS-DEBIAN-11-CVE-2025-6965, ROOT-OS-DEBIAN-12-CVE-2025-6965, UBUNTU-CVE-2025-6965, USN-7676-1
Key Facts
Patch immediately- CVE-2025-6965 is a high-severity vulnerability (CVSS 7.2 v4) affecting Ruggedcom Crossbow (Siemens), Sidis Prime (Siemens), Sqlite and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 73% probability of exploitation in the next 30 days.
- Fixed versions are available, including Ipados 26.0.0, Iphone OS 26.0.0, Macos 26.0.0.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v4
7.2
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green
EPSS (30-day exploit likelihood)
73%
Higher than 99.4% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
Available
Proof-of-concept or weaponized module
Get the full CVE-2025-6965 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Affected Products
375 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Ruggedcom CrossbowSiemens | See advisory | 5.8 |
| Sidis PrimeSiemens | See advisory | 4.0.800 |
| SqliteSqlite | See advisory | 3.50.2 |
| IpadosApple | See advisory | 26.0.0 |
| Iphone OSApple | See advisory | 26.0.0 |
Patched Releases
Ipados
26.0.0
Iphone OS
26.0.0
Macos
26.0.0
Tvos
26.0.0
Visionos
26.0.0
Watchos
26.0.0
cargo
1.86.0-1.amzn2.0.3, 1.89.0-1.amzn2023.0.2
cert-manager/jetstack-cert-manager-rhel9:v1.16.5
1760515757
clippy
1.86.0-1.amzn2.0.3, 1.89.0-1.amzn2023.0.2
discovery/discovery-server-rhel9:2.0.1
1754478727
discovery/discovery-server-rhel9:2.4.0
1763596485
discovery/discovery-ui-rhel9:2.4.0
1763656152
expr.c
3.50.2
insights-proxy/insights-proxy-container-rhel9:1.5.5
1754504343
insights-proxy/insights-proxy-container-rhel9:1.5.9
1765201856
jellyfin
12.0-r0
lemon
3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.26.0-20.el8_10, 3.31.1-4ubuntu0.7+esm1, 3.37.2-2ubuntu0.5, 3.40.0-1.amzn2023.0.6, 3.45.1-1ubuntu2.4, 3.46.1-3ubuntu0.2, 3.50.3-1.1, 3.7.17-8.0.1.el7_9.1, 3.7.17-8.amzn2.1.3, 3.8.2-1ubuntu2.2+esm5
libsqlite3-0
3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1, 3.37.2-2ubuntu0.5, 3.45.1-1ubuntu2.4, 3.46.1-3ubuntu0.2, 3.50.2-1.1, 3.50.2-150000.3.33.1, 3.50.2-9.41.1, 3.50.2-slfo.1.1_1.1, 3.50.3-1.1, 3.8.2-1ubuntu2.2+esm5
libsqlite3-0-32bit
3.50.2-150000.3.33.1, 3.50.2-9.41.1, 3.50.3-1.1
libsqlite3-0-x86-64-v3
3.50.3-1.1
libsqlite3-dev
3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1, 3.37.2-2ubuntu0.5, 3.45.1-1ubuntu2.4, 3.46.1-3ubuntu0.2, 3.8.2-1ubuntu2.2+esm5
libsqlite3-ext-csv
3.46.1-3ubuntu0.2
libsqlite3-ext-icu
3.46.1-3ubuntu0.2
libsqlite3-tcl
3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1, 3.37.2-2ubuntu0.5, 3.45.1-1ubuntu2.4, 3.46.1-3ubuntu0.2, 3.8.2-1ubuntu2.2+esm5
mingw-sqlite
0:3.26.0.0-2.el8_10, 3.26.0.0-2.el8_10
Timeline
Publicly disclosed
Jul 15, 2025
Last updated
Oct 16, 2026
Weakness Type
- CWE-197 Numeric Truncation Error
References
- advisoryRHSA-2025:11802
- advisoryRHSA-2025:11803
- advisoryRHSA-2025:11933
- advisoryRHSA-2025:11992
- advisoryRHSA-2025:12010
FAQ
Common Questions.
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.
Affected: Ruggedcom Crossbow (Siemens); Sidis Prime (Siemens); Sqlite, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Ipados 26.0.0, Iphone OS 26.0.0, Macos 26.0.0.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2025-6965 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo