PT-2025-36479 · Sqlite+3 · Sqlite Fts5+3

Scryh · Published 2025-01-01 · Updated 2026-04-10 · CVE-2025-7709

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L

Name of the Vulnerable Software and Affected Versions: SQLite FTS5 extension (affected versions not specified)

Description: An integer overflow exists in the FTS5 extension. The issue occurs when calculating the size of an array of tombstone pointers, leading to truncation into a 32-bit integer. This allows writing a pointer to partially controlled data out of bounds.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-7709

ECHO-37B8-7D67-9685

GHSA-V2C8-VQQP-HV3G

OPENSUSE-SU-2026:10171-1

OPENSUSE-SU-2026:20513-1

SUSE-SU-2026:0395-1

SUSE-SU-2026:0432-1

SUSE-SU-2026:0955-1

SUSE-SU-2026:1065-1

SUSE-SU-2026:20771-1

SUSE-SU-2026:20794-1

SUSE-SU-2026:21095-1

SUSE-SU-2026:21173-1

USN-7751-1

Affected Products

Debian

Linuxmint

Sqlite Fts5

Ubuntu

References · 44

• https://nvd.nist.gov/vuln/detail/CVE-2025-7709 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20513-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0395-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7751-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-7709 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10171-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-7709 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-7709 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21095-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-7709 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:21173-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-7709 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7751-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20794-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20771-1 · Vendor Advisory