Product:
FTS5
Summary
An integer overflow exists in the FTS5 extension. It occurs when the size of an array of tombstone pointers is calculated and truncated into a 32-bit integer. A pointer to partially controlled data can then be written out of bounds.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.9 | CVE-2025-7709 |
Exploitation
To exploit this vulnerability, an attacker must send specially crafted requests over the network that trigger the integer overflow. This can lead to writing data outside the intended memory bounds, potentially allowing the attacker to execute arbitrary code or cause a denial of service.
Affected Products
- FTS5: Vulnerable to integer overflow leading to out-of-bounds write.
Mitigation
To mitigate this vulnerability, users should apply the latest security updates provided by Google. Additionally, implementing network security measures to filter and monitor incoming requests can help reduce the risk of exploitation.