An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
7.2Alta
CVE-2025-6965Integer Truncation on SQLite
Descripción
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Debilidad (CWE):
CWE-197
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| apple | ipados | < 26.0.0 | |
| apple | iphone os | < 26.0.0 | |
| apple | macos | < 26.0.0 | |
| apple | tvos | < 26.0.0 | |
| apple | visionos | < 26.0.0 | |
| apple | watchos | < 26.0.0 | |
| siemens | ruggedcom crossbow | < 5.8 | |
| Siemens | RUGGEDCOM CROSSBOW Station Access Controller (SAC) | < V5.8 | |
| Siemens | SIDIS Prime | < V4.0.800 | |
| SQLite | SQLite | < 3.50.2 |
Referencias y parches
- https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8 Patch
- http://seclists.org/fulldisclosure/2025/Sep/49 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/53 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/56 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/57 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/58 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2025/09/06/1 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-225816.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-485750.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-765416.html
Coincidencias CPE (NVD) (9)
cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*< 3.50.2cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:*< 5.8cpe:2.3:a:siemens:sidis_prime:*:*:*:*:*:*:*:*< 4.0.800