← All advisories

Critical severity9.8NVD Advisory· Published Dec 31, 2020· Updated Jun 17, 2026

CVE-2020-35873

CVE-2020-35873

Description

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because sessions.rs has a use-after-free.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
rusqlitecrates.io	< 0.23.0	0.23.0

Affected products

3

Rust/rusqlitedescription
Rusqlite Project/Rusqlite
cpe:2.3:a:rusqlite_project:rusqlite:*:*:*:*:*:rust:*:*
Range: <0.23.0
ghsa-coords
pkg:cargo/rusqlite
Range: < 0.23.0

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-q3cc-7p7g-392cghsaADVISORY
github.com/rusqlite/rusqlite/releases/tag/0.23.0nvdRelease NotesThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2020-35873ghsaADVISORY
rustsec.org/advisories/RUSTSEC-2020-0014.htmlnvdThird Party AdvisoryWEB
github.com/rusqlite/rusqlite/commit/ac30e169ae51b262bc8cf7026469851ce39b23c6ghsaWEB

News mentions

0

No linked articles in our index yet.