An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-packaging-bundlerUpgrade nodejs-libsUpgrade nodejs-develUpgrade v8-12.4-develUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs | May 9, 2025 | Apr 14, 2025 |
| Alpine Linux | — | Upgrade sqliteUpgrade qt6-qtwebengine | Aug 8, 2025 | Apr 14, 2025 |
| Debian | — | Upgrade sqlite3 | Jul 23, 2026 | Jul 23, 2026 |
| Freebsd | — | Upgrade sqlite3Upgrade linux-c7-sqliteUpgrade linux_base-rl9 | Aug 3, 2025 | Aug 2, 2025 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory3 | Sep 25, 2025 | Jul 17, 2025 |
| Oracle_linux | — | Upgrade sqlite-develUpgrade sqliteUpgrade v8-12.4-develUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade sqlite-libsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade npmUpgrade nodejs-libsUpgrade nodejs-packaging-bundlerUpgrade nodejs | May 7, 2025 | Apr 14, 2025 |
| Redhat_linux | — | Upgrade nodejs-libs-debuginfoUpgrade sqlite-libsUpgrade sqlite-develUpgrade v8-12.4-develUpgrade lemon-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade npmUpgrade nodejs-packaging-bundlerUpgrade nodejs-debuginfoUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-tcl-debuginfoUpgrade sqliteUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejs-nodemonUpgrade sqlite-debugsourceUpgrade sqlite-tools-debuginfoUpgrade sqlite-debuginfoUpgrade nodejs-packagingUpgrade sqlite-libs-debuginfoUpgrade nodejsUpgrade nodejs-docs | May 6, 2025 | Apr 14, 2025 |
| Rocky_linux | — | Upgrade npmUpgrade v8-12.4-develUpgrade nodejs-full-i18nUpgrade sqlite-debuginfoUpgrade sqlite-debugsourceUpgrade sqliteUpgrade nodejs-libs-debuginfoUpgrade sqlite-libsUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade sqlite-develUpgrade nodejs-debugsourceUpgrade nodejs-libsUpgrade nodejsUpgrade sqlite-libs-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade sqlite3-docUpgrade sqlite3Upgrade libsqlite3-0Upgrade libsqlite3-0-32bitUpgrade sqlite3-tclUpgrade libsqlite3-0-x86-64-v3Upgrade sqlite3-devel | May 8, 2025 | Apr 14, 2025 |
| Ubuntu | — | Upgrade libsqlite3-0 | May 26, 2025 | Apr 14, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub