CVE-2025-6965: Integer Truncation on SQLite

Published Jul 15, 2025
·
Updated

Accessibility. A logic issue was addressed with improved checks.

Other sources

Accessibility. The issue was addressed by adding additional logic.

— Apple

Admin Framework. A logic issue was addressed with improved checks.

— Apple

Admin Framework. A path handling issue was addressed with improved validation.

— Apple

afclip. The issue was addressed with improved memory handling.

— Apple

AirPort. A permissions issue was addressed with additional restrictions.

— Apple

Credit

Google's Threat Analysis Group, Hossein Lotfi@@hosselot(Trend Micro Zero Day Initiative), Chi Yuan Chang(ZUSO ART), taikosoup, Gary Kwong(Trend Micro Zero Day Initiative), CVE-2025-43226, Christian Kohlschütter, Sergei Glazunov(Google Project Zero), Ivan Fratric(Google Project Zero), Vlad Stolyarov(Google's Threat Analysis Group), Michael DePlante@@izobashi(Trend Micro Zero Day Initiative), CVE-2025-6965, Gilad Moav, Yehuda Afek, Anat Bremler-Barr, Amit Klein, Yuhao Hu, Yan Kang, Chenggang Wu, Xiaojie Wei, shandikri(Trend Micro Zero Day Initiative), Google V8 Security Team, Nan Wang@@eternalsakura13, Ziling Chen, HexRabbit@@h3xr4bb1t(DEVCORE Research Team), Ignacio Sanmillan@@ulexec, Clément Lecigne(Google's Threat Analysis Group), Andreas Jaegersberger & Ro Achterberg(Nosebeard Labs), Wong Wee Xiang, Himanshu Bharti@@Xpl0itme, Brian Carpenter, Jaydev Ahire, ABC Research s.r.o., Mickey Jin@@patch1t, Noah Gregory (wts.dev), MRHAX, Aditya Rana, Seo Hyun-gyu@@wh1te4ever(Xiaomi), Dora Orak(Xiaomi), Minghao Lin@@Y1nKoc(Xiaomi), XiLong Zhang@@Resery4(Xiaomi), noir@@ROIS, fmyy (@风沐云烟), 风沐云烟@@binary_fmyy, Minghao Lin@@Y1nKoc, Gergely Kalman@@gergely_kalman, an anonymous researcher, 2ourc3 | Salim Largo, Dawuge(Shuffle Team), Anonymous(Trend Micro Zero Day Initiative), Willey Lin, Arsenii Kostromin (0x3c3e), Pyrophoria, Dora Orak, Csaba Fitzl@@theevilbit(Kandji), Kirin@@Pwnrin, Minghao Lin, Jiaxun Zhu, Zhongquan Li@@Guluisacat, Koh M. Nakagawa@@tsunek0h(Kandji), an anonymous researcher(Loadshine Lab), Hikerell(Loadshine Lab), @@zlluny, Wojciech Regula(SecuRing), Yuebin Sun@@yuebinsun2020, Shang-De Jiang(CyCraft Technology), Kazma Ye(CyCraft Technology), Nikolai Skliarenko(Trend Micro Zero Day Initiative), Keith Yeo@@kyeojy(Team Orca of Sea Security), Martin Bajanik(Fingerprint), Ammar Askar, Syarif Muhammad Sajjad, Martti Hütt, Jonathan Bar Or@@yo_yo_yo_jbo(Microsoft), Ryan Dowd@@_rdowd, Joseph Ravichandran@@0xjprx(MIT CSAIL), Dave G. (supernetworks.org), JZ, Zhongcheng Li(IES Red Team of ByteDance), Michael Reeves@@IntegralPilot, Morris Richman@@morrisinlife, Hikerell (Loadshine Lab), 이동하 (Lee Dong Ha(BoB 14th), wac(Trend Micro Zero Day Initiative), Rodolphe BRUNETTI@@eisw0lf(Lupus Nova), pattern-f@@pattern_F_, Ferdous Saljooki@@malwarezoo(Jamf), Murray Mike, 이동하 (Lee Dong Ha)(SSA Lab), Cristian Dinca (icmd.tech), Apple, Dave G.(supernetworks), Alex Radocea(supernetworks), Taavi Eomäe(Zone Media), Atul R V, Asaf Cohen, CVE-2024-43398, CVE-2024-49761, CVE-2025-6442, Vivek Dhar, ASI (RM) in Border Security Force, FTR HQ BSF Kashmir, Alexia Wilson(Microsoft), Christine Fossaceca(Microsoft), Wang Yu(Cyberserval), Nikita Sakalouski, Rosyna Keller(Totally Not Malicious Software), Guilherme Rambo(Best Buddy Apps), Yinyi Wu@@_3ndy1(Dawn Security Lab of JD), @@zlluny(Trend Micro Zero Day Initiative), Keisuke Hosoda, Viktor Oreshkin, Philipp Baldauf, Lyutoon@@Lyutoon_, YingQi Shi@@Mas0n, Tom Brzezinski, Abhay Kailasia@@abhay_kailasia(C), KPC(Cisco Talos), Evan Waelde, 정답이 아닌 해답, Richard Hyunho Im@@richeeta, Jiwon Park, Seo Hyun-gyu@@wh1te4ever, Luke Roberts@@rookuu, Big Bear, Mike Cardwell(grepular), Bob Lord, Pawel Wylecial(REDTEAM), Nolan Astrein(Kandji), Mickey Jin@@patch1t(Cisco Talos), Kirin@@Pwnrin(Cisco Talos), Claudio Bozzato(Cisco Talos), Francesco Benvenuto(Cisco Talos), Bilal Siddiqui, Matej Moravec@@MacejkoMoravec, Shantanu Thakur, Jian Lee@@speedyfriend433, Yiğit Can YILMAZ@@yilmazcanyigit, Ye Zhang@@VAR10CK(Baidu Security), Nathaniel Oh@@calysteon, Rodolphe Brunetti@@eisw0lf(Lupus Nova), LFY@@secsys(Fudan University), CVE-2025-40909, CVE-2024-27280, @@RenwaX23, Ye Zhang(Baidu Security), Kirin@@Pwnrin(Computer Science), Cristian Dinca(Computer Science), Romania, Justin Elliot Fu, Pyrophoria(GrapheneOS), an anonymous researcher(GrapheneOS), James J Kalafus, Michel Migdal, ken super

Affected Software

55 affected componentsFixes available
SQLite SQLite<3.50.2
Apple tvOS<18.6
18.6
Apple iOS<18.6
18.6
Apple iPadOS<18.6
18.6
Apple WatchOS<11.6
11.6
Apple visionOS<2.6
2.6
Apple macOS Sequoia<15.6
15.6
Apple macOS Sonoma<14.8.2
14.8.2
Apple iOS<26
26
Apple iPadOS<26
26
Apple macOS Tahoe<26
26
Apple tvOS<26
26
Apple WatchOS<26
26
Apple visionOS<26
26
Microsoft Visual Studio 2022=17.12
17.12.20
Microsoft Visual Studio 2026=18.5
18.5.3
Microsoft Visual Studio 2017 (includes 15.0 - 15.8)=15.9
15.9.80
Microsoft Visual Studio 2019 (includes 16.0 - 16.10)=16.11
16.11.56
Microsoft Windows Server 2016<10.0.14393.8783
10.0.14393.8783
Microsoft Visual Studio 2022=17.14
17.14.32
Microsoft Windows Server 2025<10.0.26100.32230
10.0.26100.32230
Microsoft Windows 11=24H2
10.0.26100.7623
Microsoft Windows 10=1607
10.0.14393.8783
Microsoft Windows 10=1607
10.0.14393.8783
Microsoft Windows Server 2022, 23H2 Edition<10.0.25398.2092
10.0.25398.2092
Microsoft Windows 11=23H2
10.0.22631.6491
Microsoft Windows 11=25H2
10.0.26200.7623
Microsoft Windows 11=23H2
10.0.22631.6491
Microsoft Windows 11=24H2
10.0.26100.7623
Microsoft Windows Server 2025<10.0.26100.32230
10.0.26100.32230
Microsoft Windows 11=25H2
10.0.26200.7623
Microsoft Windows 10=22H2
10.0.19045.6809
Microsoft Windows 10=22H2
10.0.19045.6809
Microsoft Windows 10=22H2
10.0.19045.6809
Microsoft Windows 10=21H2
10.0.19044.6809
Microsoft Windows Server 2022<10.0.20348.4648
10.0.20348.4648
Microsoft Windows 10=21H2
10.0.19044.6809
Microsoft Windows Server 2019<10.0.17763.8276
10.0.17763.8276
Microsoft Windows Server 2019<10.0.17763.8276
10.0.17763.8276
Microsoft Windows 10=21H2
10.0.19044.6809
Microsoft Windows Server 2022<10.0.20348.4648
10.0.20348.4648
Microsoft Windows 10=1809
10.0.17763.8276
Microsoft Windows 10=1809
10.0.17763.8276
Microsoft cbl2 sqlite 3.39.2-3<3.39.2-4
3.39.2-4
Microsoft azl3 sqlite 3.44.0-2<3.44.0-2
3.44.0-2
Microsoft cbl2 sqlite 3.39.2-4<3.39.2-4
3.39.2-4
SQLite SQLite<3.50.2
Apple iPadOS<26.0.0
Apple iPhone OS<26.0.0
Apple macOS<26.0.0
Apple tvOS<26.0.0
Apple visionOS<26.0.0
Apple WatchOS<26.0.0
Siemens Ruggedcom Crossbow<5.8
Siemens Sidis Prime<4.0.800

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 18.6
  2. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 11.6
  3. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 2.6
  4. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 15.6
  5. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 14.8.2
  6. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 26
  7. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 17.12.20
  8. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 15.9.80
  9. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 18.5.3
  10. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 17.14.32
  11. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 16.11.56
  12. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.14393.8783Patch KB5073722
  13. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.26100.32230Patch KB5073379
  14. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.26100.7623Patch KB5074109
  15. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.25398.2092Patch KB5073450
  16. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.22631.6491Patch KB5073455
  17. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.26200.7623Patch KB5074109
  18. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.19045.6809Patch KB5073724
  19. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.19044.6809Patch KB5073724
  20. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.20348.4648Patch KB5073457
  21. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.17763.8276Patch KB5073723
  22. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 3.39.2-4
  23. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 3.44.0-2
  24. Upgrade

    Upgrade SQLite to a version that resolves this vulnerability.

    Fixed in 3.50.2
  25. Remove

    Remove SQLite from your environment.

    Remove the vulnerable code in SQLite (vulnerable when using SQLite versions before 3.50.2).

  26. Compensating control

    Block unsigned services from launching on Intel Macs (used as the mitigation for the described downgrade-related issue on Intel-based Macs).

  27. Compensating control

    Do not load remote images (used as the mitigation for the described issue resolved by not loading remote images).

Event History

Jul 15, 2025
CVE Published
via MITRE·01:44 PM
Data Sourced
via MITRE·01:44 PM
DescriptionWeakness
Data Sourced
via Red Hat·02:02 PM
DescriptionSeverityAffected Software
Data Sourced
via NVD·02:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jul 29, 2025
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
DescriptionWeakness
Updated
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
Affected Software
Aug 14, 2025
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
SeverityAffected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Sep 15, 2025
Updated
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Nov 3, 2025
Updated
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Apr 8, 2026
Exploit Published
via ExploitDB·12:00 AM
Known Exploited
04:30 PM

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-6965?

CVE-2025-6965 has a medium severity rating due to potential memory corruption risks.

2

How do I fix CVE-2025-6965?

To fix CVE-2025-6965, upgrade SQLite to version 3.50.2 or higher.

3

What are the affected versions for CVE-2025-6965?

CVE-2025-6965 affects SQLite versions prior to 3.50.2.

4

What type of vulnerability is CVE-2025-6965?

CVE-2025-6965 is a vulnerability related to memory corruption due to aggregate term overflow.

5

Who is impacted by CVE-2025-6965?

Any users or applications utilizing SQLite versions before 3.50.2 are impacted by CVE-2025-6965.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203