Vulnerability Description
An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sqlite | Sqlite | >= 3.44.0, < 3.49.1 |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-3277?
CVE-2025-3277 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer,...
How severe is CVE-2025-3277?
CVE-2025-3277 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-3277?
Check the references section above for vendor advisories and patch information. Affected products include: Sqlite Sqlite.