Vulnerability record

CVE-2025-70873

Watch this CVEFree account

HighNo known exploitation

Patch status

Official fix available since Oct 22, 2026

Apply the vendor's update to every affected system. Check the fixed-in versions below where known.

Basis: NVD patch reference

Patch or advisory on sqlite.org (opens in a new tab)

Description

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.

Intelligence timeline

Developments from the last 30 days, newest first.

CVSS scoredUpdateOct 22, 2026
CVE-2025-70873 scored CVSS 7.5
Basis: NIST National Vulnerability Database
Patch releasedUpdateOct 22, 2026
Patch released for CVE-2025-70873
An official fix is now available.
Basis: NVD patch reference

Coverage

CriticalReview

Siemens RUGGEDCOM CROSSBOW

CISA Cybersecurity Advisories · 2 sources

Government advisoryCISA Cybersecurity Advisories
Government advisoryCISA Cybersecurity Advisories

9 hours agoCritical infra

References

gist.github.com https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054
sqlite.org https://sqlite.org/forum/forumpost/761eac3c82
sqlite.org https://sqlite.org/src/info/3d459f1fb1bd1b5e
cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-765416.html