CVE-2025-70873Disclosure(sqlite / sqlite)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

sqlite CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://sqlite.org/src/info/3d459f1fb1bd1b5e

Exploit / PoC references

https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054

Other references

https://sqlite.org/forum/forumpost/761eac3c82

Weakness type (CWE)

CWE-244

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sqlite

Threat summary

5 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 5 signals
Disclosure: 3 classified signals
General: 2 classified signals
Peaked 2d ago at 2 mentions (2026-03-13); latest day: 2
5 total mentions across 3 days

Affected systems

Vendors

sqlite

Products

sqlite

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

Disclosure

360.0%

General

240.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-13	2	Disclosure1General1
2026-04-22	1	Disclosure1
2026-09-09	2	Disclosure1General1

Full discourse5 posts

kawn@kawn202029d
Disclosure
#windowsupdate #microsoft つづき・CVE-2025-70873　An information disclosure issue in the zipfileInflate function in the 　　　　　　　　zipfile extension in SQLite v3.51.1 and earlier allows attackers to 　　　　　　　　obtain heap memory via supplying a crafted ZIP file. …
Post summary
The snippet reports CVE‑2025‑70873, an information‑disclosure flaw in SQLite’s zipfileInflate that lets attackers read heap memory with a crafted ZIP file.
1000053
87 followersView on X
kawn@kawn202029d
General
#windowsupdate #microsoft ■ 既存の脆弱性情報の更新既存のマイクロソフトの脆弱性 38 件を更新・CVE-2025-70873　An information disclosure issue in the zipfileInflate function in the 　　　　　　　　　zipfile extension in SQLite v3.51.1 and earlier allows attackers to …
Post summary
The tweet announces an update of 38 Microsoft CVEs, noting an information disclosure issue in CVE-2025-70873, but provides no evidence of an active exploit, PoC, or patch.
1000055
87 followersView on X
CVE@CVEnew209d
General
CVE-2025-70873 An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via suppl… https://www.cve.org/CVERecord?id=CVE-2025-70873
Post summary
The text identifies an info‑disclosure bug in SQLite’s zipfileInflate function, indicating potential heap memory leakage, but provides no PoC, exploit, patch, or active exploitation details.
00010211
56.7K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds210d
Disclosure
CVE-2025-70873 Information Disclosure Vulnerability in SQLite Zipfile Extension via Crafted ZIP File https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-70873
Post summary
The text announces a newly disclosed vulnerability (CVE‑2025‑70873) involving information disclosure in the SQLite Zipfile Extension through a crafted ZIP file, but provides no evidence of exploitation, patches, or a PoC.
00010109
4.0K followersView on X
Nicolas Coolman@NicolasCoolman169d
Disclosure
🚨 Fuite de mémoire critique dans Microsoft SQLite : CVE-2025-70873 expose vos données sensibles (zoneantimalware..com) https://t.co/DuVAWSuWkr
Post summary
A critical memory leak, CVE-2025-70873, has been disclosed in Microsoft SQLite that may expose sensitive data.
00000271
85 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	sqlite	sqlite	-	-	-

Explore more

Back to dashboard sqlite CVEs sqlite vulnerabilities

What researchers are saying

CVE-2025-70873

kawn@kawn2020Disclosure

The snippet reports CVE‑2025‑70873, an information‑disclosure flaw in SQLite’s zipfileInflate that lets attackers read heap memory with a crafted ZIP file.

kawn@kawn2020General

The tweet announces an update of 38 Microsoft CVEs, noting an information disclosure issue in CVE-2025-70873, but provides no evidence of an active exploit, PoC, or patch.

CVE@CVEnewGeneral

The text identifies an info‑disclosure bug in SQLite’s zipfileInflate function, indicating potential heap memory leakage, but provides no PoC, exploit, patch, or active exploitation details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces a newly disclosed vulnerability (CVE‑2025‑70873) involving information disclosure in the SQLite Zipfile Extension through a crafted ZIP file, but provides no evidence of exploitation, patches, or a PoC.

Nicolas Coolman@NicolasCoolmanDisclosure

A critical memory leak, CVE-2025-70873, has been disclosed in Microsoft SQLite that may expose sensitive data.