Skip to content
6.9 Medium

CVE-2025-7709 An integer overflow exists in the FTS5 https://sqlite.org/fts5.html  extension

Description

An integer overflow exists in the FTS5 https://sqlite.org/fts5.html  extension. It occurs when the size of an array of tombstone pointers is calculated and truncated into a 32-bit integer. A pointer to partially controlled data can then be written out of bounds.

Affected products and versions

Product Affected versions Fixed in
FTS5 Versions not published

References

Timeline

  1. Published
  2. Last modified
Track this CVE