ZeroDay Findings
Sign inSign up

Findings

CVE-2025-70873

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supply…

Published Mar 12, 2026 · updated Oct 15, 2026 · sqlite sqlite

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 12, 2026 · NIST NVD

    Detected

    An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

  2. Oct 15, 2026 · NIST NVD

    Updated

    An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

Affected

  • cpe sqlite/sqliteversion unspecified

Sources

  • CVE.orgCVE-2025-70873

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2025-70873

    An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

    nvd.nist.gov

References