Vulnpedia
← All CVEs

CVE-2025-6965

HIGH 7.2 PoC CATALOGUED ALL-YEARS

Published 2025-07-15 · Last modified 2026-10-15 · Google · NVD: Modified

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

LIKELY TARGET

73.5% modeled chance of exploitation in the next 30 days (99th percentile) · PoC resources catalogued. Prioritize remediation.

Exploitation likelihood

73.5%chance of exploitation in 30 days · 99th percentile

○ In CISA KEV● Catalogued PoC◆ SSVC: exploitation poc, automatable no

Impact if exploited

7.2CVSS 4.0 · HIGH · CNA

  • ConfidentialityLow
  • IntegrityHigh
  • AvailabilityLow

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ⚠Privileges: Requires a low-privilege account
  • ✓User interaction: No user interaction needed
  • ⚠Complexity: Needs a race window or specific setup
  • ⚠Requirements: Specific conditions must be present

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

Public PoC or exploit resources are catalogued below.

Listed by the named source; Vulnpedia has not tested these resources.

PoC data: JSON

Resource commands

searchsploit --cve CVE-2025-6965 && searchsploit -m 52499Fetch the ExploitDB PoC locally; review the code before running it.
curl -s https://vulnpedia.com/cve/CVE-2025-6965/poc.jsonMachine-readable PoC index for this CVE (for automation).

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Sqlite Siemens Apple

Products Sqlite Ruggedcom Crossbow Station Access Controller (Sac) Sidis Prime Ipados Iphone Os Macos Tvos Visionos Watchos Ruggedcom Crossbow

Weakness (CWE)

  • CWE-197: : Numeric Truncation Error

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green

References and research data (JSON)

Packages and version ranges

Each advisory describes its own package and affected ranges. A boundary applies to that range; it is not a universal upgrade recommendation.

  • SQLitePCLRaw.lib.e_sqlite3 NuGet

    pkg:nuget/SQLitePCLRaw.lib.e_sqlite3

    ECOSYSTEM range
    • All earlier versions (introduced 0)
    • Last affected version (included): 2.1.11
    54 explicitly listed affected versions

    2.0.0, 2.0.0-pre20190620134904, 2.0.0-pre20190621100518, 2.0.0-pre20190625090255, 2.0.0-pre20190628101813, 2.0.0-pre20190815131715, 2.0.1, 2.0.1-pre20190815133105, 2.0.2, 2.0.2-pre20190904113843, 2.0.2-pre20191003102319, 2.0.2-pre20191018090318, 2.0.3, 2.0.4, 2.0.4-pre20200828111558, 2.0.5, 2.0.5-pre20201231105030, 2.0.5-pre20210119130047, 2.0.5-pre20210521085756, 2.0.5-pre20210817120427, 2.0.5-pre20210824155428, 2.0.5-pre20210824155535, 2.0.6, 2.0.6-pre20210902144138, 2.0.7, 2.0.7-pre20210929171745, 2.0.8-pre20220111224339, 2.1.0, 2.1.0-pre20220207195309, 2.1.0-pre20220207221914, 2.1.0-pre20220318192836, 2.1.0-pre20220427180151, 2.1.1, 2.1.1-pre20220822172036, 2.1.10, 2.1.10-pre20240828193256, 2.1.11, 2.1.11-pre20241216174303, 2.1.2, 2.1.2-pre20220913165057, 2.1.2-pre20220916165053, 2.1.3, 2.1.3-pre20221111222311, 2.1.4, 2.1.4-pre20230105221937, 2.1.5, 2.1.5-pre20230516213315, 2.1.6, 2.1.6-pre20230809203314, 2.1.7, 2.1.7-pre20231110210158, 2.1.7-pre20231117161811, 2.1.8, 2.1.9

    Additional upstream package constraints
    {
  "database": {
    "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/07/GHSA-2m69-gcr7-jv3q/GHSA-2m69-gcr7-jv3q.json"
  }
}
    GitHub Advisory Database · GHSA-2m69-gcr7-jv3q · Updated 2026-06-18T13:26:15.158508720Z
  • SQLitePCLRaw.lib.e_sqlite3.android NuGet

    pkg:nuget/SQLitePCLRaw.lib.e_sqlite3.android

    ECOSYSTEM range
    • All earlier versions (introduced 0)
    • Last affected version (included): 2.1.11
    75 explicitly listed affected versions

    1.0.0, 1.0.0-pre20160901085507, 1.0.0-pre20160912104037, 1.0.1, 1.1.0, 1.1.0-pre20160928150051, 1.1.1, 1.1.1-pre20161109081005, 1.1.10, 1.1.10-pre20180223200113, 1.1.11, 1.1.12, 1.1.13, 1.1.14, 1.1.2, 1.1.3, 1.1.3-pre20170220084037, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 2.0.0, 2.0.0-pre20190620134904, 2.0.0-pre20190621100518, 2.0.0-pre20190625090255, 2.0.0-pre20190628101813, 2.0.1, 2.0.2, 2.0.2-pre20190904113843, 2.0.2-pre20191003102319, 2.0.2-pre20191018090318, 2.0.3, 2.0.4, 2.0.4-pre20200828111558, 2.0.5, 2.0.5-pre20201231105030, 2.0.5-pre20210119130047, 2.0.5-pre20210521085756, 2.0.5-pre20210817120427, 2.0.5-pre20210824155428, 2.0.5-pre20210824155535, 2.0.6, 2.0.6-pre20210902144138, 2.0.7, 2.0.7-pre20210929171745, 2.0.8-pre20220111224339, 2.1.0, 2.1.0-pre20220207195309, 2.1.0-pre20220207221914, 2.1.0-pre20220318192836, 2.1.0-pre20220427180151, 2.1.1, 2.1.1-pre20220822172036, 2.1.10, 2.1.10-pre20240828193256, 2.1.11, 2.1.11-pre20241216174303, 2.1.2, 2.1.2-pre20220913165057, 2.1.2-pre20220916165053, 2.1.3, 2.1.3-pre20221111222311, 2.1.4, 2.1.4-pre20230105221937, 2.1.5, 2.1.5-pre20230516213315, 2.1.6, 2.1.6-pre20230809203314, 2.1.7, 2.1.7-pre20231110210158, 2.1.7-pre20231117161811, 2.1.8, 2.1.9

    Additional upstream package constraints
    {
  "database": {
    "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/07/GHSA-2m69-gcr7-jv3q/GHSA-2m69-gcr7-jv3q.json"
  }
}
    GitHub Advisory Database · GHSA-2m69-gcr7-jv3q · Updated 2026-06-18T13:26:15.158508720Z
  • SQLitePCLRaw.lib.e_sqlite3.ios NuGet

    pkg:nuget/SQLitePCLRaw.lib.e_sqlite3.ios

    ECOSYSTEM range
    • All earlier versions (introduced 0)
    • Last affected version (included): 2.1.11
    52 explicitly listed affected versions

    2.0.0, 2.0.0-pre20190620134904, 2.0.0-pre20190621100518, 2.0.0-pre20190625090255, 2.0.0-pre20190628101813, 2.0.1, 2.0.2, 2.0.2-pre20190904113843, 2.0.2-pre20191003102319, 2.0.2-pre20191018090318, 2.0.3, 2.0.4, 2.0.4-pre20200828111558, 2.0.5, 2.0.5-pre20201231105030, 2.0.5-pre20210119130047, 2.0.5-pre20210521085756, 2.0.5-pre20210817120427, 2.0.5-pre20210824155428, 2.0.5-pre20210824155535, 2.0.6, 2.0.6-pre20210902144138, 2.0.7, 2.0.7-pre20210929171745, 2.0.8-pre20220111224339, 2.1.0, 2.1.0-pre20220207195309, 2.1.0-pre20220207221914, 2.1.0-pre20220318192836, 2.1.0-pre20220427180151, 2.1.1, 2.1.1-pre20220822172036, 2.1.10, 2.1.10-pre20240828193256, 2.1.11, 2.1.11-pre20241216174303, 2.1.2, 2.1.2-pre20220913165057, 2.1.2-pre20220916165053, 2.1.3, 2.1.3-pre20221111222311, 2.1.4, 2.1.4-pre20230105221937, 2.1.5, 2.1.5-pre20230516213315, 2.1.6, 2.1.6-pre20230809203314, 2.1.7, 2.1.7-pre20231110210158, 2.1.7-pre20231117161811, 2.1.8, 2.1.9

    Additional upstream package constraints
    {
  "database": {
    "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/07/GHSA-2m69-gcr7-jv3q/GHSA-2m69-gcr7-jv3q.json"
  }
}
    GitHub Advisory Database · GHSA-2m69-gcr7-jv3q · Updated 2026-06-18T13:26:15.158508720Z

Vendor product assessments

Showing 32 of 1304 vendor product statements; 1272 omitted. Read the full vendor advisory.

  • sqlite-0:3.7.17-9.el7_9.1.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_9.1?arch=i686

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • service-interconnect/skupper-controller-podman-rhel9@sha256:c334431860215340856ec10941615db01136d7c88f7cbfde25e3261f4b6335b6_amd64 as a component of Red Hat Service Interconnect 1 · fixed

    Vendor assessment for this product only.

    pkg:oci/skupper-controller-podman-rhel9@sha256:c334431860215340856ec10941615db01136d7c88f7cbfde25e3261f4b6335b6?arch=amd64&repository_url=registry.redhat.io/service-interconnect/skupper-controller-podman-rhel9&tag=1.8.8-1

    • vendor fix: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • npm-1:10.9.2-1.22.16.0.2.module+el8.10.0+23338+c5a38893.x86_64 (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel8.10.0%2B23338%2Bc5a38893?arch=x86_64&epoch=1&rpmmod=nodejs:22:8100020250717142920:6d880403

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • sqlite-tcl-debuginfo-0:3.26.0-16.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6.3?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • sqlite-libs-debuginfo-0:3.34.1-6.el9_2.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2.2?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • sqlite-0:3.34.1-8.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • sqlite-libs-0:3.46.1-5.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • sqlite-0:3.26.0-13.el8_4.1.src as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4.1?arch=src

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • lemon-debuginfo-0:3.26.0-18.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8.2?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • sqlite-debugsource-0:3.34.1-6.el9_2.2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2.2?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • sqlite-tools-debuginfo-0:3.34.1-8.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:ec9c6b34a40da29f3ee89b361d94879025a998d34309bf3b63c555f3c225eb16_s390x as a component of cert-manager operator for Red Hat OpenShift 1.16 · fixed

    Vendor assessment for this product only.

    pkg:oci/jetstack-cert-manager-rhel9@sha256%3Aec9c6b34a40da29f3ee89b361d94879025a998d34309bf3b63c555f3c225eb16?arch=s390x&repository_url=registry.redhat.io/cert-manager&tag=v1.16.5-1760515757

    • vendor fix: Before applying this update, make sure all previously released errata relevant to your system have been applied. The steps to apply the upgraded images are different depending on the installation plan approval policy you used when installing the cert-manager Operator for Red Hat OpenShift. - If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a new version of the Operator. No further action is required to upgrade. This is the default setting. - If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator. See https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional information. Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • lemon as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/lemon

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • sqlite as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/sqlite

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • sqlite-devel as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/sqlite-devel

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • sqlite-doc as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/sqlite-doc

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • sqlite-tcl as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/sqlite-tcl

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • sqlite.src as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/sqlite?arch=src

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • firefox as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/firefox

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • firefox.src as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/firefox?arch=src

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:0bc0b7a20ce3c6303a45a699f44d2b90597b6a62846e89a5bca285b3228a9a52_amd64 as a component of Compliance Operator 1 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/openshift-compliance-operator-bundle@sha256%3A0bc0b7a20ce3c6303a45a699f44d2b90597b6a62846e89a5bca285b3228a9a52?arch=amd64&repository_url=registry.redhat.io/compliance

    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9f4f55e287380e5c8ec9b7bb55846b878475877ff0802681817801f87ccc5238_ppc64le as a component of Red Hat Advanced Cluster Security 4.7 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/rhacs-rhel8-operator@sha256%3A9f4f55e287380e5c8ec9b7bb55846b878475877ff0802681817801f87ccc5238?arch=ppc64le&repository_url=registry.redhat.io/advanced-cluster-security

    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:761c59870f11a3760d1d00b7810c5732b69a1ee57629b6b1dadf312b16695647_amd64 as a component of Red Hat Advanced Cluster Security 4.7 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A761c59870f11a3760d1d00b7810c5732b69a1ee57629b6b1dadf312b16695647?arch=amd64&repository_url=registry.redhat.io/advanced-cluster-security

    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f1dae4ee0a6f66807752b9b8a11e1691a7bf59709b43bf4ac03b653e8bc61af0_amd64 as a component of Red Hat Advanced Cluster Security 4.7 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3Af1dae4ee0a6f66807752b9b8a11e1691a7bf59709b43bf4ac03b653e8bc61af0?arch=amd64&repository_url=registry.redhat.io/advanced-cluster-security

    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:9b67425fc074cc2154ac38dd8b5e92e5b2bbd46f8899683a23e9020e62ab5adf_s390x as a component of Red Hat Ceph Storage 7 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/rhceph-haproxy-rhel9@sha256%3A9b67425fc074cc2154ac38dd8b5e92e5b2bbd46f8899683a23e9020e62ab5adf?arch=s390x&repository_url=registry.redhat.io/rhceph

    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:ab6890d8ec728ce45cdcaf794f3589fcd9fc994d34e409abb7daa7e7b7b7bab5_arm64 as a component of Red Hat Ceph Storage 8 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/grafana-rhel9@sha256%3Aab6890d8ec728ce45cdcaf794f3589fcd9fc994d34e409abb7daa7e7b7b7bab5?arch=arm64&repository_url=registry.redhat.io/rhceph&tag=1768915405

    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:aea85ef95ff6a40839955c80a64dad0c4ff8bcfd1f4b0b15262caee21ee26ef3_arm64 as a component of Red Hat Ceph Storage 8 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/rhceph-haproxy-rhel9@sha256%3Aaea85ef95ff6a40839955c80a64dad0c4ff8bcfd1f4b0b15262caee21ee26ef3?arch=arm64&repository_url=registry.redhat.io/rhceph

    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:2b91440f3b71bc63e819a3def29e72b31f49878e03fbea67624de6a06925f340_ppc64le as a component of cert-manager operator for Red Hat OpenShift 1.16 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3A2b91440f3b71bc63e819a3def29e72b31f49878e03fbea67624de6a06925f340?arch=ppc64le&repository_url=registry.redhat.io/cert-manager&tag=v1.16.5-1760509690

    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • rls (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux 8 · known not affected

    Vendor assessment for this product only.

    Reason: component not present

    pkg:rpm/redhat/rls?rpmmod=rust-toolset:rhel8

    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • rust (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux 8 · known not affected

    Vendor assessment for this product only.

    Reason: component not present

    pkg:rpm/redhat/rust?rpmmod=rust-toolset:rhel8

    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • rust-debugger-common as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: component not present

    pkg:rpm/redhat/rust-debugger-common

    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00
  • thunderbird.src as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not in execute path

    pkg:rpm/redhat/thunderbird?arch=src

    Red Hat · CVE-2025-6965 · Updated 2026-10-09T22:44:11+00:00

Known Affected Software Configurations

VendorProductVersion range
SqliteSqlite< 3.50.2
AppleIpados< 26.0.0
AppleIphone Os< 26.0.0
AppleMacos< 26.0.0
AppleTvos< 26.0.0
AppleVisionos< 26.0.0
AppleWatchos< 26.0.0
SiemensRuggedcom Crossbow< 5.8
SiemensSidis Prime< 4.0.800

All CVSS metrics

  • HIGH 7.2 v4.0 · CNA Primary
    CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green
  • HIGH 7.2 v4.0 · NVD Secondary
    CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green
  • HIGH 7.7 v3.1 · NVD Primary
    CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L

References

Patches & mitigations

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS