CVE-2025-6965: apple ipados Numeric Truncation Error
CVSS: 7.7v3.1HighModified
AliasesALPINE-CVE-2025-6965MGASA-2025-0267SUSE-SU-2025:02672-1SUSE-SU-2025:02744-1SUSE-SU-2025:20561-1SUSE-SU-2025:20674-1RHSA-2025:11802RHSA-2025:11803RHSA-2025:11933RHSA-2025:11992RHSA-2025:12010RHSA-2025:12036RHSA-2025:12349RHSA-2025:12521RHSA-2025:12522RHSA-2025:12749RHSA-2025:12901RHSA-2025:12904RHSA-2025:12905RHSA-2025:14101RHSA-2025:20936UBUNTU-CVE-2025-6965USN-7676-1DEBIAN-CVE-2025-6965CGA-63qg-xvcq-ghwmCGA-px5j-w2vw-p36jopenSUSE-SU-2025:15368-1GHSA-2m69-gcr7-jv3qBIT-sqlite-2025-6965
Published 15-07-2025Last modified 15-10-2026
Vulnerability summary
CVE-2025-6965 is a high (CVSS 7.7) Numeric Truncation Error vulnerability in apple ipados. EPSS estimates a 73.30% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
7.7/10
010
High · v3.1 (NVD)EPSS score
73.30%
0%100%
Critical · +0.75 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database
Advisory lineage
Upstream 0 · Downstream 5 · Related 1Timeline
- 15-07-2025PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
CVSS metrics
12 scores · 9 sources · 2 versionsHigh 7.2Preferred score · CVE.org (CNA)
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:GreenSourcesAll 6 agree
- OSV · UbuntuEcosystem advisory · calculated7.2HighCVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green
- OSV · WolfiEcosystem advisory · calculated7.2HighCVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green
- OSV · ChainguardEcosystem advisory · calculated7.2HighCVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green
- OSV · NugetEcosystem advisory · calculated7.2HighCVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green
- NVDNIST7.2HighCVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green
High 7.7Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:LSources6 sources · 7.7–9.8
- OSV · AlpineEcosystem advisory · calculated7.7HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
- OSV · Red hatEcosystem advisory · calculated7.7HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
- OSV · UbuntuEcosystem advisory · calculated7.7HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
- OSV · DebianEcosystem advisory · calculated7.7HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
- OSV · NugetEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
73.30%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+0.75 pp
From 72.55% on 18-09-2026
18-09-202618-10-2026
EPSS score73.30%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundSQLite 3.50.1 - Heap Overflow
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Redhat33 products
- lemon< 0:3.26.0-20.el8_10 | < 0:3.7.17-9.el7_9.1 | < 0:3.26.0-18.el8_8.2 | < 0:3.26.0-6.el8_2.1 | < 0:3.26.0-16.el8_6.3 | < 0:3.26.0-13.el8_4.1
- lemon-debuginfo< 0:3.46.1-5.el10_0 | < 0:3.34.1-8.el9_6 | < 0:3.26.0-20.el8_10 | < 0:3.34.1-7.el9_4.1 | < 0:3.26.0-18.el8_8.2 | < 0:3.34.1-5.el9_0.1 | < 0:3.34.1-6.el9_2.2 | < 0:3.26.0-6.el8_2.1 | < 0:3.26.0-16.el8_6.3 | < 0:3.26.0-13.el8_4.1 | < 0:3.34.1-9.el9_7
- mingw-sqlite< 0:3.26.0.0-2.el8_10
- mingw32-sqlite< 0:3.26.0.0-2.el8_10
- mingw32-sqlite-debuginfo< 0:3.26.0.0-2.el8_10
Suse25 products
- sqlite3&distro=SUSE Enterprise Storage 7.1< 3.50.2-150000.3.33.1
- sqlite3&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 3.50.2-150000.3.33.1
- sqlite3&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 3.50.2-150000.3.33.1
- sqlite3&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 3.50.2-150000.3.33.1
- sqlite3&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 3.50.2-150000.3.33.1
NuGet3 products
- SQLitePCLRaw.lib.e_sqlite3≤ 2.1.11
- SQLitePCLRaw.lib.e_sqlite3.android≤ 2.1.11
- SQLitePCLRaw.lib.e_sqlite3.ios≤ 2.1.11
Opensuse2 products
- sqlite3&distro=openSUSE Leap 15.6< 3.50.2-150000.3.33.1
- sqlite3&distro=openSUSE Tumbleweed< 3.50.3-1.1
Siemens2 products
- ruggedcom crossbow< 5.8
- sidis_prime< 4.0.800
Alpine1 product
- sqlite< 3.41.2-r4 | < 3.44.2-r2 | < 3.45.3-r3 | < 3.48.0-r3 | < 3.49.2-r1
Chainguard1 product
- jellyfin< 12.0-r0
Debian1 product
- sqlite3< 3.40.1-2+deb12u2 | < 3.46.1-7
Mageia1 product
- sqlite3< 3.40.1-1.3.mga9
Sqlite1 product
- sqlite< 3.50.2
Ubuntu1 product
- sqlite3< 3.8.2-1ubuntu2.2+esm5 | < 3.11.0-1ubuntu1.5+esm3 | < 3.22.0-1ubuntu0.7+esm2 | < 3.31.1-4ubuntu0.7+esm1 | < 3.46.1-6ubuntu1 | < 3.37.2-2ubuntu0.5 | < 3.45.1-1ubuntu2.4
Wolfi1 product
- jellyfin< 12.0-r0
13 vendors · 78 products
