{"id":"CVE-2025-70873","title":"An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.","summary":"An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-244"],"vendor":"sqlite","product":"sqlite","affected":["sqlite < 3.51.1"],"patched":["sqlite 3.51.1"],"published":"2026-03-12","updated":"2026-10-15","sourceUpdated":"2026-10-15T02:18:16.173","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-70873","references":[{"url":"https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054","label":"cve@mitre.org"},{"url":"https://sqlite.org/forum/forumpost/761eac3c82","label":"cve@mitre.org"},{"url":"https://sqlite.org/src/info/3d459f1fb1bd1b5e","label":"cve@mitre.org"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-765416.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00313,"epssPercentile":0.22508,"ingestedAt":"2026-10-15T03:30:12.835Z","exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-03-14T03:33:48.480447Z"},"slug":"CVE-2025-70873","body":"## Overview\n\nAn information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.\n\n## Affected\n\n- `sqlite < 3.51.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `sqlite 3.51.1`","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":222061,"id":"CVE-2025-70873","ts":1792043740797,"field":"exploit_available","old":"false","new":"true"}]}