github.com
https://github.com/rusqlite/rusqlite CVE-2020-35872
CRITICAL
Improper type usage in rusqlite
Record summary
CVE-2020-35872 has a selected CVSS score of 9.8 (critical).
Description
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the repr(Rust) type.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
rusqliteBrowse crates.io / rusqlite | GitHub Advisory | Before 0.23.0 · Fixed in 0.23.0 | affected |
References
5github.com
https://github.com/rusqlite/rusqlite/commit/71b2f5187b0cbace3f8b6ff53432ff2ca0defcf0 github.com
https://github.com/rusqlite/rusqlite/releases/tag/0.23.0 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-35872 rustsec.org
https://rustsec.org/advisories/RUSTSEC-2020-0014.html