~ / search / GHSA-8h4j-vm3r-vcq3

GHSA-8h4j-vm3r-vcq3

Use after free in rusqlite

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-35870

Packages

EcosystemPackageAffectedFixed in
crates.io rusqlite < 0.23.0 0.23.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API use-after-free.

References

External links from the advisory. They lead to third-party sites.