Back to board Open MSRC
MSRC compact vulnerability detail

CVE-2025-70873 · An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

No description was published by MSRC.

Severity
n/a
Impact
n/a
CVSS
7.5 base · 7.5 temporal
Release
2026-04-18
Signals
Mariner Unknown impact Exploited: n/a Publicly disclosed: n/a Exploitability: n/a
CWE
CWE-244: Improper Clearing of Heap Memory Before Release ('Heap Inspection')
Patch Diff
Loading module diff metadata...
Resolved binary override
Use this when the MSRC module name cannot be mapped automatically or the resolved binary looks wrong.
Old version New version
Description
No description was published by MSRC.
FAQ / Articles
No FAQ or article content was published.