7.5
High
CVE-2025-70873 An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier…
Description
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM CROSSBOW Station Access Controller (SAC) 6.0 | earliest → < 6.0 | 6.0 |
| n/a | Versions not published |
References
- sqlite.org sqlite.org
- sqlite.org sqlite.org
- gist.github.com gist.github.com
Timeline
- Published
- Last modified
Other CVEs of RUGGEDCOM CROSSBOW Station Access Controller (SAC)
The 11 CVEs of RUGGEDCOM CROSSBOW Station Access Controller (SAC) →
CVE-2026-11824
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that…
8.5
High
CVE-2026-11822
SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows…
5.5
Medium
CVE-2025-71316
SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to…
9.8
Critical
CVE-2025-6965
Integer Truncation on SQLite
7.2
High