UBUNTU-CVE-2025-7709
- Source
- https://ubuntu.com/security/CVE-2025-7709
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-7709.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-7709
- Upstream
- Downstream
- Related
- Published
- 2025-09-08T15:15:00Z
- Modified
- 2026-02-04T03:06:22.231966Z
- Severity
-
- 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension. It occurs when the size of an array of tombstone pointers is calculated and truncated into a 32-bit integer. A pointer to partially controlled data can then be written out of bounds.
- References
Affected packages
Ubuntu:24.04:LTS / sqlite3
Package
- Name
- sqlite3
- Purl
- pkg:deb/ubuntu/sqlite3@3.45.1-1ubuntu2.5?arch=source&distro=noble
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.45.1-1ubuntu2.5
Affected versions
3.*
3.42.0-1
3.44.0-1
3.44.2-1
3.45.0-1
3.45.1-1
3.45.1-1ubuntu1
3.45.1-1ubuntu2
3.45.1-1ubuntu2.1
3.45.1-1ubuntu2.3
3.45.1-1ubuntu2.4
Ecosystem specific
{
"binaries": [
{
"binary_version": "3.45.1-1ubuntu2.5",
"binary_name": "lemon"
},
{
"binary_version": "3.45.1-1ubuntu2.5",
"binary_name": "libsqlite3-0"
},
{
"binary_version": "3.45.1-1ubuntu2.5",
"binary_name": "libsqlite3-dev"
},
{
"binary_version": "3.45.1-1ubuntu2.5",
"binary_name": "libsqlite3-tcl"
},
{
"binary_version": "3.45.1-1ubuntu2.5",
"binary_name": "sqlite3"
},
{
"binary_version": "3.45.1-1ubuntu2.5",
"binary_name": "sqlite3-tools"
}
],
"availability": "No subscription required"
}