CVE-2025-47736

Summary

dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.

Affected Software

Weaknesses

• CWE-228: CWE-228 Improper Handling of Syntactically Invalid Structure

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://github.com/gwenn/lemon-rs/issues/86

References

• https://github.com/tursodatabase/libsql/issues/2052
• https://github.com/gwenn/lemon-rs/issues/86
• https://github.com/gwenn/lemon-rs/pull/8
• https://crates.io/crates/libsql-sqlite3-parser

• ←Previous
• Next→