Skip to content

CVE-2025-70873 on CTRL-OS 24.05

Packages: sqlite

Status: New

CVE Information

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

Updates

2026-04-23 02:10 CEST

Metadata changes:

  • Status for package sqlite: “New”