Back

MEDIUM

Out Of Bounds write in FTS5 Extension in SQLite

Published Sep 8, 2025

Description

An integer overflow exists in the FTS5 https://sqlite.org/fts5.html  extension. It occurs when the size of an array of tombstone pointers is calculated and truncated into a 32-bit integer. A pointer to partially controlled data can then be written out of bounds.

Affected products

Remediation

No remediation recorded yet.

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner Google
Published Sep 8, 2025
Updated Nov 18, 2025
Reserved Jul 16, 2025

CISA Vulnrichment

Updated Sep 8, 2025

NVD

Status Deferred
Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner Google
Published Sep 8, 2025
Updated Nov 18, 2025

GitHub

No data