~ / search / GHSA-q3cc-7p7g-392c

GHSA-q3cc-7p7g-392c

Use after free in rusqlite

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-35873

Packages

EcosystemPackageAffectedFixed in
crates.io rusqlite < 0.23.0 0.23.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because sessions.rs has a use-after-free.

References

External links from the advisory. They lead to third-party sites.