Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.

🗓️ 03 Sep 2025 23:33:38Reported by MicrosoftType 
mscve
 mscve🔗 msrc.microsoft.com👁 2 Views

sqlite3VXPrintf vulnerability before 3.8.9 mishandles precision and width, enabling denial of service.

Related
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Using Components with Known Vulnerabilities affects IBM Security Guardium (multiple CVEs)
16 Jun 201821:41
–ibm
IBM Security Bulletins		IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index
31 Jan 202100:10
–ibm
IBM Security Bulletins		Security Bulletin: A vulnerability in SQLite affects IBM Security Network Protection (CVE-2015-3416)
16 Jun 201821:39
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Python, rpcbind, SQLite affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance
17 Jun 201822:33
–ibm
IBM Security Bulletins		Security Bulletin: A vulnerability in SQLite affects IBM Security Access Manager for Web (CVE-2015-3416)
16 Jun 201821:41
–ibm
IBM Security Bulletins		Security Bulletin: A vulnerability in SQLite affects IBM Security Access Manager for Mobile (CVE-2015-3416)
16 Jun 201821:41
–ibm
Tenable Nessus		PHP 5.5.x < 5.5.26 / 5.6.x < 5.6.10 Multiple Vulnerabilities
18 Jun 201500:00
–nessus
Tenable Nessus		Apple iOS < 9.0 Multiple Vulnerabilities
15 Oct 201500:00
–nessus
Tenable Nessus		Mac OS X < 10.11 Multiple Vulnerabilities
28 Oct 201500:00
–nessus
Tenable Nessus		Amazon Linux AMI : php54 (ALAS-2015-561)
9 Jul 201500:00
–nessus
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
03 Sep 2025 23:33Current
9.3High risk
Vulners AI Score9.3
CVSS 27.5
EPSS0.07717
sqlite vulnerabilityprintf overflowprecision bugwidth bugdenial of service
2