CVE-2020-35872

The CVE-2020-35872 entry concerns the rusqlite crate for Rust, before version 0.23.0. The root cause is a memory-safety issue exposed via the repr(Rust) type, which can lead to memory-safety violations. The vulnerability is reflected in high-severity CVSS scores (NVD: CVSS2 7.5; CVSS3.1 9.8) with...

CVE-2020-35873

The CVE-2020-35873 entry concerns the rusqlite crate for Rust prior to version 0.23.0. The issue is a memory-safety bug caused by a use-after-free in sessions.rs, leading to potential memory corruption. Public references indicate fixes were released in rusqlite 0.23.0 (see linked release notes) a...

CVE-2021-45719

The CVE-2021-45719 issue affects rusqlite (Rust) versions 0.25.x before 0.25.4 and 0.26.x before 0.26.2, with use-after-free in update_hook (and related closure hooks) that could compromise safety. Multiple OSV entries and advisories confirm use-after-free in several rusqlite APIs, including crea...

CVE-2020-35867

The CVE-2020-35867 issue affects the rusqlite crate for Rust prior to version 0.23.0, where memory safety can be violated via create_module. Multiple sources (including Red Hat, OSV/GHSA advisories) describe memory-safety vulnerabilities in rusqlite before 0.23.0, with issues such as use-after-fr...

CVE-2020-35871

CVE-2020-35871 concerns the Rust package rusqlite prior to 0.23.0, where memory safety can be violated via a data race in the Auxdata API. Connected sources (RH CVE, OSV advisories, and EU/NVD references) consistently identify data races affecting rusqlite before version 0.23.0, including issues ...

CVE-2020-35866

CVE-2020-35866 concerns the rusqlite crate for Rust, with memory-safety violations possible in VTab / VTabCursor when using versions before 0.23.0. Public details in the initial doc specify the issue and point to release 0.23.0 as the fix (rusqlite/releases/tag/0.23.0). Related connected records ...

CVE-2021-45714

Summary: Several OSV and advisory records confirm a use-after-free in the rusqlite crate for Rust, affecting 0.25.x before 0.25.4 and 0.26.x before 0.26.2. The issues concern multiple callback-registration paths and related closures (e.g., create_aggregate_function, create_scalar_function, create...

CVE-2021-45716

The CVE-2021-45716 issue affects the rusqlite crate for Rust, in versions 0.25.x before 0.25.4 and 0.26.x before 0.26.2, where create_collation (and related closure-handling APIs) exhibits a use-after-free condition. The OSV entries for rusqlite (GHSA variants) and related advisories confirm the ...

CVE-2021-45713

Summary ( CVE-2021-45713 / rusqlite ) : The vulnerability concerns the Rust rusqlite crate versions 0.25.x before 0.25.4 and 0.26.x before 0.26.2, where several closure/callback APIs (including create_scalar_function, create_aggregate_function, create_window_function, and related hooks) have a us...

CVE-2020-35870

The CVE concerns the rusqlite crate for Rust, pre-0.23.0, where a memory-safety vulnerability exists due to an Auxdata API use-after-free. Reported across multiple trusted sources, this affects the Rust library’s handling of Auxdata and can cause use-after-free conditions. The vendor-facing Red H...

CVE-2021-45718

The CVE-2021-45718 entry concerns rusqlite for Rust with multiple use-after-free issues in 0.25.x before 0.25.4 and 0.26.x before 0.26.2. Affected components include rollback_hook, commit_hook, update_hook, create_scalar_function, create_aggregate_function, create_window_function, and create_coll...

CVE-2020-35868

CVE-2020-35868 affects the rusqlite crate for Rust prior to 0.23.0. Reported as memory-safety issues such as use-after-free and data races (UnlockNotification, VTab/VTabCursor, Auxdata API, and related paths) that could violate memory safety. The CVE entry is supported by multiple vulnerability r...

CVE-2021-45715

rusqlite vulnerabilities (CVE-2021-45715) affect Rust crates 0.25.x before 0.25.4 and 0.26.x before 0.26.2 with use-after-free in various callback hooks. OSV/GHSA details show direct issues in create_window_function, create_scalar_function, create_aggregate_function, create_collation, and hooks s...

CVE-2020-35869

CVE-2020-35869 affects the Rust rusqlite crate prior to 0.23.0. The issue is a memory safety vulnerability caused by rusqlite::trace::log mishandling format strings, with CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base 9.8). Remediation: upgrade to rusqlite 0.23.0 or later. Current documents d...

CVE-2021-45717

The CVE-2021-45717 entry corresponds to an issue in the rusqlite crate (Rust) where use-after-free vulnerabilities exist in multiple callback/hooks. Affected versions are 0.25.x before 0.25.4 and 0.26.x before 0.26.2; the problem affects functions that register or invoke callbacks, including: com...