RUGGEDCOM CROSSBOW SAC before 6.0 includes vulnerable SQLite code
Five SQLite flaws can yield code execution, denial of service, or information disclosure; the product fix is V6.0 or later.
60
CVE-2025-70873
- CVSS 3.1
- 7.5 high
- EPSS
- <1%p41
- Published
- ·
- Modified
Description · NVD
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.