An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
7.2Yüksek
CVE-2025-6965Integer Truncation on SQLite
Açıklama
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Zayıflık türü (CWE):
CWE-197
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| apple | ipados | < 26.0.0 | |
| apple | iphone os | < 26.0.0 | |
| apple | macos | < 26.0.0 | |
| apple | tvos | < 26.0.0 | |
| apple | visionos | < 26.0.0 | |
| apple | watchos | < 26.0.0 | |
| siemens | ruggedcom crossbow | < 5.8 | |
| Siemens | RUGGEDCOM CROSSBOW Station Access Controller (SAC) | < V5.8 | |
| Siemens | SIDIS Prime | < V4.0.800 | |
| SQLite | SQLite | < 3.50.2 |
Kaynaklar ve yamalar
- https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8 Patch
- http://seclists.org/fulldisclosure/2025/Sep/49 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/53 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/56 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/57 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/58 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2025/09/06/1 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-225816.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-485750.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-765416.html
CPE eşleşmeleri (NVD) (9)
cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*< 3.50.2cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:*< 5.8cpe:2.3:a:siemens:sidis_prime:*:*:*:*:*:*:*:*< 4.0.800