CVE intelligence

CVE-2025-6965

Vulnerability intelligence

Published Jul 15, 2025Sources checked Nov 13, 2026

7.7HIGHCVSS out of 10

What this means

Review the available evidence

CVE-2025-6965 and is rated High severity with a CVSS score of 7.7. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

Public exploit: Cataloged public exploit.

Exploit-DB: SQLite 3.50.1 - Heap Overflow (2026-09-23 21:40:27.335989+00)
Exploit-DB lists a public exploit or proof of concept for this CVE. SecurityAlert has not executed it; this is not evidence of attacks against your systems.

What to do next

Remediation and response

Microsoft Security Response Center guidance

Vendor revision: Jun 19, 2026

Vendor remediation details

CBL-Mariner Releases Release Notes Install KB5073723. Install KB5073457. Install KB5073724. Install KB5073379. Install KB5074109. Install KB5073455. Install KB5073450. Install KB5073722.

Vendor-listed releases

3.39.2-4
18.5.3
3.44.0-2
10.0.17763.8276
10.0.20348.4648
10.0.19044.6809
10.0.19045.6809
10.0.26100.32230
10.0.26200.7623
10.0.22631.6491
10.0.25398.2092
10.0.26100.7623
10.0.14393.8783
15.9.82
16.11.56
17.12.20
17.14.32

CISA KEVNot listedBased on the latest collected catalog

EPSS73.5%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2025-6965?

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue.

We recommend upgrading to version 3.50.2 or above.

Source: NVD