Lucene search

K
rustsecRustsecRUSTSEC-2022-0090
HistoryAug 03, 2022 - 12:00 p.m.

`libsqlite3-sys` via C SQLite CVE-2022-35737

2022-08-0312:00:00
rustsec.org
16
sqlite
c
software vulnerability

EPSS

0.003

Percentile

65.5%

It was sometimes possible for SQLite versions >= 1.0.12, < 3.39.2 to allow an array-bounds overflow when large string were input into SQLite’s printf function.

As libsqlite3-sys bundles SQLite, it is susceptible to the vulnerability. libsqlite3-sys was updated to bundle the patched version of SQLite here.