SQLite report about CVE-2025-7709

An attacker who has complete control over the database content could create a corrupt FTS5 index resulting access to memory outside the bounds of an array due to integer overflow. Fixed on 2025-07-15...

The vulnerabilities of the ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c components of the SQLite database management system allow a hacker to cause a service failure.

The vulnerability of the ext/fts5/fts5hash.c and ext/fts5/fts5index.c components of the SQLite database management system is related to the use of a null pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...