{"id":"CVE-2025-29088","title":"In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash)","summary":"In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). An sz*nBig multiplication is not cast to a 64-bit integer, and consequently some memo…","severity":"medium","cvss":5.6,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","cwe":["CWE-190"],"vendor":"sqlite","product":"sqlite","affected":["sqlite = 3.49.0"],"published":"2025-04-10","updated":"2026-10-15","sourceUpdated":"2026-10-15T02:17:47.500","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-29088","references":[{"url":"https://gist.github.com/ylwango613/d3883fb9f6ba8a78086356779ce88248","label":"cve@mitre.org"},{"url":"https://github.com/sqlite/sqlite/commit/56d2fd008b108109f489339f5fd55212bb50afd4","label":"cve@mitre.org"},{"url":"https://sqlite.org/forum/forumpost/48f365daec","label":"cve@mitre.org"},{"url":"https://sqlite.org/releaselog/3_49_1.html","label":"cve@mitre.org"},{"url":"https://www.sqlite.org/cves.html","label":"cve@mitre.org"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-994087.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org"],"epss":0.00217,"epssPercentile":0.11297,"ingestedAt":"2026-10-15T03:30:12.810Z","ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2025-04-11T19:43:38.254260Z"},"slug":"CVE-2025-29088","body":"## Overview\n\nIn SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). An sz*nBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect.\n\n## Affected\n\n- `sqlite = 3.49.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":31,"depthScoreParts":{"impact":30.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}