Wind River Support Network

HomeDefectsLIN1022-21703

Acknowledged

LIN1022-21703 : Security Advisory - sqlite3 - CVE-2025-70873

Created: Mar 15, 2026 Updated: Mar 30, 2026

Found In Version: 10.22.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.