CVE-2025-7458 — SQLite integer overflow in key info allocation may lead to information disclosure.

CVE-2025-7458

SQLite integer overflow in key info allocation may lead to information disclosure. PUBLISHED

Description (CNA)

An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.

Affected (CNA)

Vendor / product	Versions
SQLite / SQLite	affected 3.39.2 before 3.41.2

CWE

CWE-190

References

https://sqlite.org/forum/forumpost/16ce2bb7a639e29b
https://sqlite.org/src/info/12ad822d9b827777

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.