CyberICT

CVE-2025-70873

Microsoft · Published September 8, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.. An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

Affected Products

  • azl3 sqlite 3.44.0-2 on Azure Linux 3.0
  • Microsoft Visual Studio 2026 version 18.9
  • Microsoft Visual Studio 2022 version 17.14
  • Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N