Rusqlite Project Rusqlite — known CVE vulnerabilities

Every CVE whose affected-product data names Rusqlite Project Rusqlite, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2020-35866 — CVSS 9.8 (critical): An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via VTab / VTabCursor.
• CVE-2020-35867 — CVSS 9.8 (critical): An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via create_module.
• CVE-2020-35868 — CVSS 9.8 (critical): An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via UnlockNotification.
• CVE-2020-35869 — CVSS 9.8 (critical): An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because rusqlite::trace::log mishandles…
• CVE-2020-35870 — CVSS 9.8 (critical): An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API use-after-free.
• CVE-2020-35872 — CVSS 9.8 (critical): An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the repr(Rust) type.
• CVE-2020-35873 — CVSS 9.8 (critical): An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because sessions.rs has a…
• CVE-2020-35871 — CVSS 8.1 (high): An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race.
• CVE-2021-45713 — CVSS 7.5 (high): An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_scalar_function has a…
• CVE-2021-45714 — CVSS 7.5 (high): An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_aggregate_function has a…
• CVE-2021-45715 — CVSS 7.5 (high): An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_window_function has a…
• CVE-2021-45716 — CVSS 7.5 (high): An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_collation has a use-after-free.
• CVE-2021-45717 — CVSS 7.5 (high): An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commit_hook has a use-after-free.
• CVE-2021-45719 — CVSS 7.5 (high): An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. update_hook has a use-after-free.
• CVE-2021-45718 — CVSS 7.5 (high): An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. rollback_hook has a use-after-free.