VULNERABILITY INTELLIGENCE

CVE-2025-29088

CVSS score5.6 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-04-10
Last modified2026-10-15
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Description

In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). An sz*nBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect.

Weakness classification

  • cve@mitre.org: CWE-190

Primary references