CVE Vulnerabilities

CVE-2025-6965

Numeric Truncation Error

Published: Jul 15, 2025 | Modified: Nov 04, 2025
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
7.7 IMPORTANT
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
Ubuntu
MEDIUM

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

Weakness

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

Affected Software

Name Vendor Start Version End Version
Sqlite Sqlite * 3.50.2 (excluding)
Red Hat Enterprise Linux 10 RedHat sqlite-0:3.46.1-5.el10_0 *
Red Hat Enterprise Linux 7 Extended Lifecycle Support RedHat sqlite-0:3.7.17-9.el7_9.1 *
Red Hat Enterprise Linux 8 RedHat nodejs:22-8100020250717142920.6d880403 *
Red Hat Enterprise Linux 8 RedHat sqlite-0:3.26.0-20.el8_10 *
Red Hat Enterprise Linux 8 RedHat mingw-sqlite-0:3.26.0.0-2.el8_10 *
Red Hat Enterprise Linux 8 RedHat sqlite-0:3.26.0-20.el8_10 *
Red Hat Enterprise Linux 8.2 Advanced Update Support RedHat sqlite-0:3.26.0-6.el8_2.1 *
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support RedHat sqlite-0:3.26.0-13.el8_4.1 *
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On RedHat sqlite-0:3.26.0-13.el8_4.1 *
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support RedHat sqlite-0:3.26.0-16.el8_6.3 *
Red Hat Enterprise Linux 8.6 Telecommunications Update Service RedHat sqlite-0:3.26.0-16.el8_6.3 *
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions RedHat sqlite-0:3.26.0-16.el8_6.3 *
Red Hat Enterprise Linux 8.8 Telecommunications Update Service RedHat sqlite-0:3.26.0-18.el8_8.2 *
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions RedHat sqlite-0:3.26.0-18.el8_8.2 *
Red Hat Enterprise Linux 9 RedHat nodejs:22-9060020250721113755.rhel9 *
Red Hat Enterprise Linux 9 RedHat sqlite-0:3.34.1-8.el9_6 *
Red Hat Enterprise Linux 9 RedHat sqlite-0:3.34.1-9.el9_7 *
Red Hat Enterprise Linux 9 RedHat sqlite-0:3.34.1-8.el9_6 *
Red Hat Enterprise Linux 9 RedHat sqlite-0:3.34.1-9.el9_7 *
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions RedHat sqlite-0:3.34.1-5.el9_0.1 *
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions RedHat sqlite-0:3.34.1-6.el9_2.2 *
Red Hat Enterprise Linux 9.4 Extended Update Support RedHat sqlite-0:3.34.1-7.el9_4.1 *
Red Hat OpenShift Container Platform 4.12 RedHat rhcos-412.86.202510291903-0 *
Red Hat OpenShift Container Platform 4.13 RedHat rhcos-413.92.202510150118-0 *
Red Hat OpenShift Container Platform 4.14 RedHat rhcos-414.92.202510211419-0 *
Red Hat OpenShift Container Platform 4.17 RedHat rhcos-417.94.202510112152-0 *
Red Hat OpenShift Container Platform 4.18 RedHat rhcos-418.94.202510230424-0 *
Red Hat OpenShift Container Platform 4.19 RedHat rhcos-4.19.9.6.202510140714-0 *
Red Hat OpenShift Container Platform 4.20 RedHat rhcos-4.20.9.6.202509251656-0 *
Red Hat Web Terminal 1.11 on RHEL 9 RedHat web-terminal/web-terminal-rhel9-operator:1.11-19 *
Red Hat Web Terminal 1.11 on RHEL 9 RedHat web-terminal/web-terminal-tooling-rhel9:1.11-8 *
Red Hat Web Terminal 1.12 on RHEL 9 RedHat web-terminal/web-terminal-tooling-rhel9:1.12-4 *
Cert-manager operator for Red Hat OpenShift 1.16 RedHat cert-manager/jetstack-cert-manager-rhel9:sha256:df852ad92734bc087e213e6c7075daf6d7010db4ab72919649736804e295a6a2 *
Compliance Operator 1 RedHat compliance/openshift-compliance-content-rhel8:sha256:0642196267bef5bc68c20a5ee4d35c5dd139fbb00a905578a85cab5e220f445a *
Compliance Operator 1 RedHat compliance/openshift-compliance-must-gather-rhel8:sha256:b282ae2e5cfe451081785f221137d45d05320cf0017c3f1cba18a509d43eb6d9 *
Compliance Operator 1 RedHat compliance/openshift-compliance-openscap-rhel8:sha256:8294e4b1b531457282270c375f4045ea2baf20a0a8a637006364096a9dec3c41 *
Compliance Operator 1 RedHat compliance/openshift-compliance-rhel8-operator:sha256:9bc1fca7173d0080640ff9900d362512e480012a616922f4763e8e6becd8f520 *
Red Hat Discovery 2 RedHat discovery/discovery-server-rhel9:sha256:c517869dacaf4d3650310d4a52e83706e0b311d6ebb4a9b37b1c7acff5c142ec *
Red Hat Insights proxy 1.5 RedHat insights-proxy/insights-proxy-container-rhel9:sha256:c26d589f12647890b67aaa986f54d3f7c6f7f2563fb5a73f38d559e6138739d7 *
Sqlite Ubuntu upstream *
Sqlite3 Ubuntu devel *
Sqlite3 Ubuntu esm-infra-legacy/trusty *
Sqlite3 Ubuntu esm-infra/bionic *
Sqlite3 Ubuntu esm-infra/focal *
Sqlite3 Ubuntu esm-infra/xenial *
Sqlite3 Ubuntu jammy *
Sqlite3 Ubuntu noble *
Sqlite3 Ubuntu plucky *
Sqlite3 Ubuntu questing *

Potential Mitigations

References