CVE-2022-35737

Improper Validation of Array Index in conan/sqlite3

Identifiers

CVE-2022-35737

Package Slug

conan/sqlite3

Vulnerability

Improper Validation of Array Index

Description

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

Affected Versions

All versions starting from 1.0.12 before 3.39.2

Solution

Upgrade to version 3.39.2 or above.

Last Modified

2023-09-08

source