CVE-2025-6965

CVE-2025-6965 is a critical memory corruption vulnerability (CWE-197) in SQLite versions prior to 3.50.2, where an excessive number of aggregate terms can lead to memory corruption. This vulnerability affects SQLite and has a CVSS score of 9.8 (Critical), indicating a network-exploitable flaw with no user interaction required, potentially leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, suggesting high awareness and potential for future exploitation. Organizations are strongly advised to upgrade SQLite to version 3.50.2 or newer to mitigate this risk.