High · 7.5 CVE-2021-45713 CVE-2021-45714CVE-2021-45715CVE-2021-45716CVE-2021-45717CVE-2021-45718CVE-2021-45719EUVD-2022-0538GHSA-4qr3-m7ww-hh9gGHSA-87xh-9q6h-r5ccGHSA-92cx-4xm7-jr9mGHSA-cm8g-544f-p9x9GHSA-f6f2-3w33-54r9GHSA-g4g4-3pqw-8m7fGHSA-g87r-23vw-7f87GHSA-q89g-4vhh-mvvmRUSTSEC-2021-0128

Use After Free in rusqlite

Published Dec 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Package: rusqlite Ecosystem: crates.io

Description

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_scalar_function has a use-after-free.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
crates.io	rusqlite	>= 0.25.0, < 0.25.4	0.25.4	GHSA-4qr3-m7ww-hh9g
crates.io	rusqlite	>= 0.26.0, < 0.26.2	0.26.2	GHSA-4qr3-m7ww-hh9g
crates.io	rusqlite	>= 0.25.0, < 0.25.4 · >= 0.26.0-0, < 0.26.2	0.25.4, 0.26.2	RUSTSEC-2021-0128

References

https://rustsec.org/advisories/RUSTSEC-2021-0128.html
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/rusqlite/RUSTSEC-2021-0128.md