Dashboard / CVE-2025-6965

CVE-2025-6965

HIGH
ACT NOW Priority: 5.29 BB Relevance: 64/100
Published: 2025-07-15 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Network No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: Low
UI: None
S: N
AT: Present
VC: Low
VI: High
VA: Low

Description

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

Weakness Classification (1)

Affected Software (10)

VendorProductVersion
SQLite SQLite 0 < 3.50.2
apple ipados < 26.0.0
apple iphone_os < 26.0.0
apple macos < 26.0.0
apple tvos < 26.0.0
apple visionos < 26.0.0
apple watchos < 26.0.0
siemens ruggedcom_crossbow < 5.8
siemens sidis_prime < 4.0.800
sqlite sqlite < 3.50.2

References & Advisories (10)

Bug Bounty Relevance

64 / 100
✓ Network accessible
✓ No user interaction
✓ High exploitation probability

CVSS Score

7.2 / 10.0 v4.0
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green

EPSS — Exploitation Probability

73.45%
Raw Score 0.734520
Percentile 99.5%
Date 2026-11-07

EPSS Trend

2026-11-07
0.73452
2026-11-06
0.73452
2026-11-05
0.73452
2026-11-04
0.73452
2026-11-03
0.73452

Intelligence Sources

mitre ref →
nvd ref →

External Links