BIT-sqlite-2025-70873

vendorUSosv

view advisory published 2026-04-18Licence: per source

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-70873US	—	0.33% (25th)	—	2026-03-12
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted…

references

External citations — patches, advisories, analysis.

https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2025-70873WEB
https://sqlite.org/forum/forumpost/761eac3c82REPORT
https://sqlite.org/src/info/3d459f1fb1bd1b5eFIX

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan