P4Verified

CVE-2025-70873: sqlite before 3.51.1 (exclusive); +2 more affected products

CVE-2025-70873 affects azl3 sqlite 3.44.0-2 on Azure Linux 3.0. CVSS 3.1 base score 7.5 (msrc). EPSS 0.00301 (percentile 0.20722), scored 03-Oct-2026.

Affected technology

sqlite · before 3.51.1 (exclusive)
sqlite

n/a · n/a
Vendor not specified by the source

RUGGEDCOM CROSSBOW Station Access Controller (SAC) · 0 to before V6.0
Siemens

Description’s affected range: v3.51.1 and earlier

Component: Not specified by the source
Function: in

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could access information they should not be able to access. Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality impact as high; integrity and availability impact as none.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-244
Product: azl3 sqlite 3.44.0-2 on Azure Linux 3.0
CCR priority: 30.1 /100 (P4)
CVSS 3.1: 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · Source advisory
EPSS: 0.00313 · percentile 0.22508 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-70873.html