CVE-2025-3791
Last modified
CVE-2025-3791 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. A vulnerability classified as critical was found in symisc UnQLite up to 957c377cb691a4f617db9aba5cc46d90425071e2. This vulnerability affects the function jx9MemObjStore of the file /data/src/benchmarks/unqlite/unqlite.c. EPSS estimates a 0.18% chance of exploitation in the next 30 days.
Description
A vulnerability classified as critical was found in symisc UnQLite up to 957c377cb691a4f617db9aba5cc46d90425071e2. This vulnerability affects the function jx9MemObjStore of the file /data/src/benchmarks/unqlite/unqlite.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-3791?
How severe is CVE-2025-3791?
How do I fix CVE-2025-3791?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-37904In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-37905In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-37906In the Linux kernel, the following vulnerability has been re…4.7
- CVE-2025-37907In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-37908In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2025-37909In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-37910In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-37911In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-37912In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-37913In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2025-37914In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2025-37915In the Linux kernel, the following vulnerability has been re…7
Are you affected by CVE-2025-3791?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST