Skip to main content

CVE-2025-70873

CVE Details

Visit the official vulnerability details page for CVE-2025-70873 to learn more.

Initial Publication

03/12/2026

Last Update

04/16/2026

Third Party Dependency

sqlite-libs

NIST CVE Summary

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

CVE Severity

7.5

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Analyzed

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
1.1.0-rc.1⚠️ Impacted⚠️ Impacted
1.0.7⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.