SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow

5.5 CVSS

Vulnerability Description

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-7104

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Junwha Hong
Wonil Jang
qbit (VulDB User)

References

More from SQLite

View All →

CVE-2025-7709

Out Of Bounds write in FTS5 Extension in SQLite

Medium 6.9

CVE-2025-7458

SQLite integer overflow in key info allocation may lead to information disclosure.

Medium 6.9

CVE-2025-71316

SQLite sqldiff remote code execution via argument injection

Critical 9.2

CVE-2025-6965

Integer Truncation on SQLite

High 7.2

CVE-2025-3277

An integer overflow can be triggered in SQLite’s `concat_ws()` function....

Medium 6.9

Affected Vendor

SQLite

View all reports →

Affected Software

SQLite3

Vulnerable Versions:

3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6, 3.7, 3.8, 3.9, 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, 3.16, 3.17, 3.18, 3.19, 3.20, 3.21, 3.22, 3.23, 3.24, 3.25, 3.26, 3.27, 3.28, 3.29, 3.30, 3.31, 3.32, 3.33, 3.34, 3.35, 3.36, 3.37, 3.38, 3.39, 3.40, 3.41, 3.42, 3.43