CVE-2025-7458
SQLite integer overflow in key info allocation may lead to information disclosure.
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
SQLite integer overflow in key info allocation may lead to information disclosure.
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
- Record
CVE-2025-7458- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2025-23000
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
- Record
EUVD-2025-23000- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-h2g7-95mc-8g48
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through...
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
- Record
GHSA-h2g7-95mc-8g48- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
NVD
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
- Record
CVE-2025-7458- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVBELL-CVE-2025-7458
- Record
BELL-CVE-2025-7458- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSV
SQLite integer overflow in key info allocation may lead to information disclosure.
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
- Record
CVE-2025-7458- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N - Weakness
- CWE-190
- Updated
- 2026-11-02
Show 5 moreShow less
OSVDEBIAN-CVE-2025-7458
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
- Record
DEBIAN-CVE-2025-7458- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-7458
CVE-2025-7458 in sqlite3 - Patched by Root
Root has patched CVE-2025-7458 in the sqlite3 package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2025-7458- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-03
OSVUBUNTU-CVE-2025-7458
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
- Record
UBUNTU-CVE-2025-7458- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N - CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVAZL-65990 No score
CVE-2025-7458 affecting package sqlite for versions less than 3.39.2-4
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
- Record
AZL-65990- Updated
- 2026-11-02
OSVBIT-sqlite-2025-7458 No score
SQLite integer overflow in key info allocation may lead to information disclosure.
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
- Record
BIT-sqlite-2025-7458- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sqliteAzure Linux:2 |
before 3.39.2-4 | 3.39.2-4 |
sqliteAlpaquita:23 |
3.40.0-r0 up to 3.40.1-r3 | 3.40.1-r3 |
sqliteAlpaquita:stream |
3.41.1-r0 up to 3.42.0-r2 | 3.42.0-r2 |
sqliteBellSoft Hardened Containers:23 |
3.40.0-r0 up to 3.40.1-r3 | 3.40.1-r3 |
sqliteBellSoft Hardened Containers:stream |
3.41.1-r0 up to 3.42.0-r2 | 3.42.0-r2 |
sqliteBitnami |
3.39.2 up to 3.41.2 | 3.41.2 |
sqlite3Debian:12 |
All versions, plus listed versions 3.40.1-23.40.1-2+deb12u13.40.1-2+deb12u23.42.0-13.43.0-1 Show 24 moreShow less3.43.1-13.43.2-13.44.0-13.44.2-13.45.0-13.45.1-13.45.2-13.45.3-13.45.3-2~exp13.46.0-13.46.1-13.46.1-23.46.1-2~exp3.46.1-33.46.1-43.46.1-53.46.1-63.46.1-73.46.1-83.46.1-93.53.2-13.53.3-13.53.4-13.53.4-2 |
None known |
sqlite3Debian:13 |
before 3.42.0-1 | 3.42.0-1 |
sqlite3Debian:14 |
before 3.42.0-1 | 3.42.0-1 |
sqlite3Root:Debian:12 |
before 3.40.1-2+deb12u2.root.io.8 | 3.40.1-2+deb12u2.root.io.83.40.1-2+deb12u2.root.io.73.40.1-2+deb12u2.root.io.53.40.1-2+deb12u2.root.io.63.40.1-2+deb12u2.root.io.93.40.1-2+deb12u2.root.io.103.40.1-2+deb12u2.aikido.113.40.1-2+deb12u2.aikido.12 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rootio-sqlite3Root:Debian:12 |
before 3.40.1-2+deb12u2.root.io.8 | 3.40.1-2+deb12u2.root.io.83.40.1-2+deb12u2.root.io.73.40.1-2+deb12u2.root.io.53.40.1-2+deb12u2.root.io.63.40.1-2+deb12u2.root.io.93.40.1-2+deb12u2.root.io.103.40.1-2+deb12u2.aikido.113.40.1-2+deb12u2.aikido.12 |
sqliteUbuntu:14.04:LTS |
All versions, plus listed versions 2.8.17-8fakesync12.8.17-9fakesync12.8.17-10ubuntu2 |
None known |
sqliteUbuntu:16.04:LTS |
All versions, plus listed versions 2.8.17-12fakesync1 |
None known |
sqliteUbuntu:18.04:LTS |
All versions, plus listed versions 2.8.17-14fakesync1 |
None known |
sqliteUbuntu:20.04:LTS |
All versions, plus listed versions 2.8.17-15fakesync1build1 |
None known |
sqliteUbuntu:22.04:LTS |
All versions, plus listed versions 2.8.17-15fakesync1build1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-7458 is a medium vulnerability (CVSS 6.9) in Sqlite, published July 29, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. Fixed in sqlite 3.39.2-4.
References
sqlite.org/forum/forumpost/16ce2bb7a639e29b
nvd.nist.gov/vuln/detail/CVE-2025-7458
github.com/advisories/GHSA-h2g7-95mc-8g48
docs.bell-sw.com/security/cves/CVE-2025-7458
security-tracker.debian.org/tracker/CVE-2025-7458
ubuntu.com/security/CVE-2025-7458
cve.org/CVERecord?id=CVE-2025-7458