Skip to content

CVE-2025-70873 on CTRL-OS 26.05

Aliases: CVE-2025-70873

Packages: sqlite

Status: Resolved

Advisory Information

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

Updates

2026-08-01 01:01 CEST

Metadata changes:

  • Status for package sqlite: “Resolved” (77ce28421597cd2853142b09a3ec3b8c9b6fd1cd)

2026-07-31 01:09 CEST

Metadata changes:

  • Status for package sqlite: “New”