cve.bz

CVE-2020-35871

8.1 highEPSS 1.0%

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race.

Severity

CVSS 3.1

8.1 high
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE
CWE-362
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-28ph-f7gx-fqj8crates.iorusqlite<0.23.00.23.0
GHSA-3cgf-9m6x-pwwrcrates.iorusqlite<0.23.00.23.0
GHSA-6q5w-m3c5-rv95crates.iorusqlite<0.23.00.23.0
GHSA-8h4j-vm3r-vcq3crates.iorusqlite<0.23.00.23.0
GHSA-8r7q-r9mx-35rhcrates.iorusqlite<0.23.00.23.0
GHSA-g4w7-3qr8-5623crates.iorusqlite<0.23.00.23.0
GHSA-q3cc-7p7g-392ccrates.iorusqlite<0.23.00.23.0
GHSA-rjh8-p66p-jrh5crates.iorusqlite<0.23.00.23.0
RUSTSEC-2020-0014crates.iorusqlite>=0.0.0-0 <0.23.00.23.0

References

Check your stackJSON