Description

In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). An sz*nBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect.

INFO

Published Date :

2025-04-10T00:00:00.000Z

Last Modified :

2025-08-26T19:27:20.720Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-29088 vulnerability.

Vendors Products
Sqlite
  • Sqlite
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-29088.

URL Resource
https://gist.github.com/ylwango613/d3883fb9f6ba8a78086356779ce88248 cve-icon cve-icon cve-icon
https://github.com/sqlite/sqlite/commit/56d2fd008b108109f489339f5fd55212bb50afd4 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-29088 cve-icon
https://sqlite.org/forum/forumpost/48f365daec cve-icon cve-icon
https://sqlite.org/releaselog/3_49_1.html cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-29088 cve-icon
https://www.sqlite.org/cves.html cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact