Vulnerability RUSTSEC-2022-0090
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
4 years ago
August 03, 2022 at 12:00 PM UTC
`libsqlite3-sys` via C SQLite CVE-2022-35737
>=0.0.0-0 <0.25.1
>=0.0.0-0 <0.25.1
Summary
`libsqlite3-sys` via C SQLite CVE-2022-35737
Details
It was sometimes possible for SQLite versions >= 1.0.12, < 3.39.2 to allow an array-bounds overflow when large string were input into SQLite's printf function.
As libsqlite3-sys bundles SQLite, it is susceptible to the vulnerability. libsqlite3-sys was updated to bundle the patched version of SQLite here.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
10 days ago
`libsqlite3-sys` via C SQLite CVE-2026-119375
>=0.6.0 <0.39.0 RUSTSEC-2026-0459
>=0.6.0 <0.39.0 RUSTSEC-2026-0459
High Risk
4 years ago
`libsqlite3-sys` via C SQLite improperly validates array index
<0.25.1 GHSA-jw36-hf63-69r9
<0.25.1 GHSA-jw36-hf63-69r9
Impacted packages
Timeline
Published
4 years ago
August 03, 2022 at 12:00 PM UTC
Last Modified
2 years ago
December 06, 2023 at 01:02 AM UTC