CVE-2025-6965

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.50.2

Description An integer truncation issue exists in the Aggregate Term Handler component of SQLite. This occurs when the number of aggregate terms exceeds the number of available columns, which can lead to memory corruption. This flaw was identified as a zero-day known only to threat actors before being discovered by Google's Big Sleep AI agent. Exploitation of this issue could allow a remote attacker to impact confidentiality, integrity, and availability, potentially enabling arbitrary code execution, privilege escalation, and lateral movement within networked industrial systems, such as the Siemens RUGGEDCOM CROSSBOW SAC.

Recommendations Update SQLite to version 3.50.2 or above.