CVE-2025-7458
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
Vendor
Product
CWE
Yayın Tarihi
2025-07-29 13:15:28
Güncelleme
2025-08-11 19:11:30
Source Identifier
cve-coordination@google.com
KEV Date Added
-