PT-2026-25047 · Sqlite+1 · Sqlite+1

CVE-2025-70873 · Publicado 2026-03-12 · Atualizado 2026-05-26

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions SQLite versions 3.51.1 and earlier

Description An issue exists where a crafted ZIP file can lead to the disclosure of heap memory. The issue is present in the zipfileInflate function within the zipfile extension.

Recommendations Versions prior to 3.51.1 should be updated.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-244

Identificadores relacionados

BDU:2026-07794

BIT-SQLITE-2025-70873

CVE-2025-70873

ECHO-186E-750F-440B

OESA-2026-1767

OESA-2026-1768

OESA-2026-1769

OESA-2026-1770

OESA-2026-1771

OESA-2026-1772

OPENSUSE-SU-2026:10406-1

OPENSUSE-SU-2026:20513-1

RHSA-2026:7656

SUSE-SU-2026:0955-1

SUSE-SU-2026:1065-1

SUSE-SU-2026:20771-1

SUSE-SU-2026:20794-1

SUSE-SU-2026:21095-1

SUSE-SU-2026:21173-1

Produtos afetados

Red Os

Sqlite

Referências · 52

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/70xxx/CVE-2025-70873.json · Exploit
• 🔥 https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2026:20513-1 · Aviso do Fabricante
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1767 · Nota
• https://sqlite.org/src/info/3d459f1fb1bd1b5e · Correção
• https://osv.dev/vulnerability/OESA-2026-1769 · Aviso do Fabricante
• https://sqlite.org/forum/forumpost/761eac3c82 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2026:21095-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2026-1772 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-70873 · Nota de Segurança
• https://osv.dev/vulnerability/SUSE-SU-2026:1065-1 · Aviso do Fabricante
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1771 · Nota
• https://bdu.fstec.ru/vul/2026-07794 · Nota de Segurança
• https://bugzilla.suse.com/1254670 · Nota
• https://bugzilla.suse.com/1252217 · Nota