critical
CVE-2025-7458
sqlite: SQLite integer overflow
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat6.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Bitnami9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Bitnami. Rated lower by Red Hat (medium), CBL-Mariner (medium).
Description
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | sqlite | 3.41.2 |
| CBL-Mariner 2.0 | sqlite | 0:3.39.2-4.cm2 |
| debian 12 | sqlite3 | no fix listed |
| debian 13 | sqlite3 | 3.42.0-1 |
| debian 14 | sqlite3 | 3.42.0-1 |
| echo | sqlite3 | 3.40.1-2+deb12u1-e3 |
| rapidfort alma 10 | sqlite, sqlite-devel, sqlite-libs | no fix listed |
| rapidfort alma 8 | firefox, thunderbird | no fix listed |
| rapidfort alma 9 | cargo, clippy, firefox and 14 more | no fix listed |
| rapidfort amazon linux | rf-sqlite | 3.40.0-10.rfal |
| rapidfort amazon linux 2023 | rf-lemon, rf-sqlite, rf-sqlite-analyzer and 6 more | no fix listed |
| rapidfort debian 12 | rf-sqlite3, sqlite3 | 0:3.46.1-7+deb13u1 and 1 more |
Show all 142 entries from 25 sources
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | sqlite | 3.41.2 |
| CBL-Mariner 2.0 | sqlite | 0:3.39.2-4.cm2 |
| debian 12 | sqlite3 | no fix listed |
| debian 13 | sqlite3 | 3.42.0-1 |
| debian 14 | sqlite3 | 3.42.0-1 |
| echo | sqlite3 | 3.40.1-2+deb12u1-e3 |
| rapidfort alma 10 | sqlite | no fix listed |
| rapidfort alma 10 | sqlite-devel | no fix listed |
| rapidfort alma 10 | sqlite-libs | no fix listed |
| rapidfort alma 8 | firefox | no fix listed |
| rapidfort alma 8 | thunderbird | no fix listed |
| rapidfort alma 9 | cargo | no fix listed |
| rapidfort alma 9 | clippy | no fix listed |
| rapidfort alma 9 | firefox | no fix listed |
| rapidfort alma 9 | firefox-x11 | no fix listed |
| rapidfort alma 9 | rust | no fix listed |
| rapidfort alma 9 | rust-analyzer | no fix listed |
| rapidfort alma 9 | rust-debugger-common | no fix listed |
| rapidfort alma 9 | rust-doc | no fix listed |
| rapidfort alma 9 | rust-gdb | no fix listed |
| rapidfort alma 9 | rust-lldb | no fix listed |
| rapidfort alma 9 | rust-src | no fix listed |
| rapidfort alma 9 | rust-std-static | no fix listed |
| rapidfort alma 9 | rust-std-static-wasm32-unknown-unknown | no fix listed |
| rapidfort alma 9 | rust-std-static-wasm32-wasip1 | no fix listed |
| rapidfort alma 9 | rust-toolset | no fix listed |
| rapidfort alma 9 | rustfmt | no fix listed |
| rapidfort alma 9 | thunderbird | no fix listed |
| rapidfort amazon linux | rf-sqlite | 3.40.0-10.rfal |
| rapidfort amazon linux 2023 | rf-lemon | no fix listed |
| rapidfort amazon linux 2023 | rf-sqlite | no fix listed |
| rapidfort amazon linux 2023 | rf-sqlite-analyzer | no fix listed |
| rapidfort amazon linux 2023 | rf-sqlite-devel | no fix listed |
| rapidfort amazon linux 2023 | rf-sqlite-doc | no fix listed |
| rapidfort amazon linux 2023 | rf-sqlite-libs | no fix listed |
| rapidfort amazon linux 2023 | rf-sqlite-tcl | no fix listed |
| rapidfort amazon linux 2023 | rf-sqlite-tools | no fix listed |
| rapidfort amazon linux 2023 | sqlite | no fix listed |
| rapidfort debian 12 | rf-sqlite3 | 0:3.46.1-7+deb13u1 |
| rapidfort debian 12 | sqlite3 | 0:3.42.0-1 |
| rapidfort debian 13 | rf-sqlite3 | 0:3.46.1-7+deb13u1 |
| rapidfort debian 13 | sqlite3 | 0:3.42.0-1 |
| rapidfort Oracle Linux 10 | sqlite | no fix listed |
| rapidfort Oracle Linux 10 | sqlite-devel | no fix listed |
| rapidfort Oracle Linux 10 | sqlite-libs | no fix listed |
| rapidfort Oracle Linux 9 | cargo | no fix listed |
| rapidfort Oracle Linux 9 | clippy | no fix listed |
| rapidfort Oracle Linux 9 | firefox | no fix listed |
| rapidfort Oracle Linux 9 | firefox-x11 | no fix listed |
| rapidfort Oracle Linux 9 | rust | no fix listed |
| rapidfort Oracle Linux 9 | rust-analysis | no fix listed |
| rapidfort Oracle Linux 9 | rust-analyzer | no fix listed |
| rapidfort Oracle Linux 9 | rust-debugger-common | no fix listed |
| rapidfort Oracle Linux 9 | rust-doc | no fix listed |
| rapidfort Oracle Linux 9 | rust-gdb | no fix listed |
| rapidfort Oracle Linux 9 | rust-lldb | no fix listed |
| rapidfort Oracle Linux 9 | rust-src | no fix listed |
| rapidfort Oracle Linux 9 | rust-std-static | no fix listed |
| rapidfort Oracle Linux 9 | rust-std-static-wasm32-unknown-unknown | no fix listed |
| rapidfort Oracle Linux 9 | rust-std-static-wasm32-wasi | no fix listed |
| rapidfort Oracle Linux 9 | rust-std-static-wasm32-wasip1 | no fix listed |
| rapidfort Oracle Linux 9 | rust-toolset | no fix listed |
| rapidfort Oracle Linux 9 | rustfmt | no fix listed |
| rapidfort Oracle Linux 9 | thunderbird | no fix listed |
| rapidfort Red Hat 10 | rf-sqlite | no fix listed |
| rapidfort Red Hat 10 | rf-sqlite-devel | no fix listed |
| rapidfort Red Hat 10 | rf-sqlite-libs | no fix listed |
| rapidfort Red Hat 10 | sqlite | no fix listed |
| rapidfort Red Hat 10 | sqlite-devel | no fix listed |
| rapidfort Red Hat 10 | sqlite-libs | no fix listed |
| rapidfort Red Hat 9 | cargo | no fix listed |
| rapidfort Red Hat 9 | clippy | no fix listed |
| rapidfort Red Hat 9 | rust | no fix listed |
| rapidfort Red Hat 9 | rust-analysis | no fix listed |
| rapidfort Red Hat 9 | rust-debugger-common | no fix listed |
| rapidfort Red Hat 9 | rust-doc | no fix listed |
| rapidfort Red Hat 9 | rust-gdb | no fix listed |
| rapidfort Red Hat 9 | rust-lldb | no fix listed |
| rapidfort Red Hat 9 | rust-src | no fix listed |
| rapidfort Red Hat 9 | rust-std-static | no fix listed |
| rapidfort Red Hat 9 | rust-toolset | no fix listed |
| rapidfort Red Hat 9 | rustfmt | no fix listed |
| rapidfort rocky 8 | firefox | no fix listed |
| rapidfort rocky 8 | thunderbird | no fix listed |
| rapidfort rocky 9 | cargo | no fix listed |
| rapidfort rocky 9 | clippy | no fix listed |
| rapidfort rocky 9 | firefox | no fix listed |
| rapidfort rocky 9 | firefox-x11 | no fix listed |
| rapidfort rocky 9 | rust | no fix listed |
| rapidfort rocky 9 | rust-analyzer | no fix listed |
| rapidfort rocky 9 | rust-doc | no fix listed |
| rapidfort rocky 9 | rust-std-static | no fix listed |
| rapidfort rocky 9 | rust-std-static-wasm32-unknown-unknown | no fix listed |
| rapidfort rocky 9 | rust-toolset | no fix listed |
| rapidfort rocky 9 | rustfmt | no fix listed |
| rapidfort rocky 9 | thunderbird | no fix listed |
| Red Hat | cargo | no fix listed |
| Red Hat | clippy | no fix listed |
| Red Hat | firefox | no fix listed |
| Red Hat | firefox-x11 | no fix listed |
| Red Hat | openshift/ose-rhel-coreos-8 | no fix listed |
| Red Hat | rust | no fix listed |
| Red Hat | rust-analysis | no fix listed |
| Red Hat | rust-analyzer | no fix listed |
| Red Hat | rust-debugger-common | no fix listed |
| Red Hat | rust-doc | no fix listed |
| Red Hat | rust-gdb | no fix listed |
| Red Hat | rust-lldb | no fix listed |
| Red Hat | rust-src | no fix listed |
| Red Hat | rust-std-static | no fix listed |
| Red Hat | rust-std-static-wasm32-unknown-unknown | no fix listed |
| Red Hat | rust-std-static-wasm32-wasi | no fix listed |
| Red Hat | rust-std-static-wasm32-wasip1 | no fix listed |
| Red Hat | rust-toolset | no fix listed |
| Red Hat | rust-toolset:rhel8::cargo | no fix listed |
| Red Hat | rust-toolset:rhel8::cargo-doc | no fix listed |
| Red Hat | rust-toolset:rhel8::clippy | no fix listed |
| Red Hat | rust-toolset:rhel8::rls | no fix listed |
| Red Hat | rust-toolset:rhel8::rust | no fix listed |
| Red Hat | rust-toolset:rhel8::rust-analysis | no fix listed |
| Red Hat | rust-toolset:rhel8::rust-analyzer | no fix listed |
| Red Hat | rust-toolset:rhel8::rust-debugger-common | no fix listed |
| Red Hat | rust-toolset:rhel8::rust-doc | no fix listed |
| Red Hat | rust-toolset:rhel8::rust-gdb | no fix listed |
| Red Hat | rust-toolset:rhel8::rust-lldb | no fix listed |
| Red Hat | rust-toolset:rhel8::rust-src | no fix listed |
| Red Hat | rust-toolset:rhel8::rust-std-static | no fix listed |
| Red Hat | rust-toolset:rhel8::rust-std-static-wasm32-unknown-unknown | no fix listed |
| Red Hat | rust-toolset:rhel8::rust-std-static-wasm32-wasi | no fix listed |
| Red Hat | rust-toolset:rhel8::rust-toolset | no fix listed |
| Red Hat | rust-toolset:rhel8::rustfmt | no fix listed |
| Red Hat | rustfmt | no fix listed |
| Red Hat | thunderbird | no fix listed |
| root.io debian 12 | rootio-sqlite3 | 3.40.1-2+deb12u1.root.io.4, 3.40.1-2+deb12u2.root.io.5, 3.40.1-2+deb12u2.root.io.6, 3.40.1-2+deb12u2.root.io.7, 3.40.1-2+deb12u2.root.io.8, 3.40.1-2+deb12u2.root.io.9 |
| root.io debian 12 | sqlite3 | 3.40.1-2+deb12u1.root.io.4, 3.40.1-2+deb12u2.root.io.5, 3.40.1-2+deb12u2.root.io.6, 3.40.1-2+deb12u2.root.io.7, 3.40.1-2+deb12u2.root.io.8, 3.40.1-2+deb12u2.root.io.9 |
| root.io debian 13 | rootio-sqlite3 | 3.42.0-1 |
| seal debian | seal-sqlite3 | 3.40.1-2+sp999, 3.40.1-2+deb12u1+sp2 |
| seal debian | sqlite3 | 3.40.1-2+sp999, 3.40.1-2+deb12u1+sp2 |
| seal Red Hat 7 | seal-sqlite | 3.7.17-8.el7_7.1+sp999 |
| seal Red Hat 7 | sqlite | 3.7.17-8.el7_7.1+sp999 |
| seal Red Hat 8 | seal-sqlite | 3.26.0-19.el8_9+sp999 |
| seal Red Hat 8 | sqlite | 3.26.0-19.el8_9+sp999 |