Vulnerability · Published Apr 18, 2025 · Assigned by VulDB

CVE-2025-3791symisc UnQLite unqlite.c jx9MemObjStore heap-based overflow

Medium 5.3

In plain English

A medium-severity heap buffer overflow in UnQLite from symisc. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.2%top 87.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability classified as critical was found in symisc UnQLite up to 957c377cb691a4f617db9aba5cc46d90425071e2. This vulnerability affects the function jx9MemObjStore of the file /data/src/benchmarks/unqlite/unqlite.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

Affected products (as reported)

Vendor	Product	Versions
symisc	UnQLite	957c377cb691a4f617db9aba5cc46d90425071e2

Weakness: CWE-122, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

VDB-305614 | symisc UnQLite unqlite.c jx9MemObjStore heap-based overflow vdb-entry, technical-description
VDB-305614 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #554574 | UnQLite mater Heap-based Buffer Overflow third-party-advisory
https://github.com/symisc/unqlite/issues/173 issue-tracking
https://github.com/user-attachments/files/19652580/unqlite-reproduce-heap-overflow.zip exploit