SQLite up to 3.41.1 SELECT Statement sqlite3KeyInfoFromExprList integer overflow

Summaryinfo

A vulnerability categorized as problematic has been discovered in SQLite up to 3.41.1. Affected by this vulnerability is the function sqlite3KeyInfoFromExprList of the component SELECT Statement Handler. Such manipulation leads to integer overflow. This vulnerability is uniquely identified as CVE-2025-7458. Local access is required to approach this attack. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in SQLite up to 3.41.1. It has been rated as problematic. Affected by this issue is the function sqlite3KeyInfoFromExprList of the component SELECT Statement Handler. The manipulation with an unknown input leads to a integer overflow vulnerability. Using CWE to declare the problem leads to CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. Impacted is confidentiality, integrity, and availability. CVE summarizes:

An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.

The advisory is shared for download at sqlite.org. This vulnerability is handled as CVE-2025-7458 since 07/11/2025. The exploitation is known to be easy. The attack needs to be approached locally. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 249982 (CBL Mariner 2.0 Security Update: sqlite (CVE-2025-7458)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 3.41.2 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (249982). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Name

• SQLite

Version

• 3.41.0
• 3.41.1

License

• free

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion