CVE-2025-70873

Опубликовано: 12 мар. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

Ссылки

https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054
Exploit
Third Party Advisory
https://sqlite.org/forum/forumpost/761eac3c82
Issue Tracking
https://sqlite.org/src/info/3d459f1fb1bd1b5e
Issue Tracking
Patch
https://cert-portal.siemens.com/productcert/html/ssa-765416.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*

Версия до 3.51.1 (исключая)

EPSS

Процентиль: 41%

0.00468

Низкий

7.5 High

CVSS3

Дефекты

CWE-244

Связанные уязвимости

CVE-2025-70873

CVSS3: 7.5

ubuntu

8 месяцев назад

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

CVE-2025-70873

CVSS3: 3.3

redhat

8 месяцев назад

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

CVE-2025-70873

CVSS3: 7.5

msrc

2 месяца назад

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

CVE-2025-70873

CVSS3: 7.5

debian

8 месяцев назад

An information disclosure issue in the zipfileInflate function in the ...

ROS-20260526-80-0006

CVSS3: 7.5

redos

6 месяцев назад

Уязвимость python-relenv

EPSS

Процентиль: 41%

0.00468

Низкий

7.5 High

CVSS3

Дефекты

CWE-244