An integer overflow can be triggered in SQLite’s `concat_ws()` function....
Vulnerability Description
An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-3277
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- 王跃林 (Yuelin Wang)
References
More from SQLite
View All →Affected Vendor
SQLite
View all reports →