CVE-2025-47736: dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.

2.9 CVSS

Description

dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.

CVSS Base Severity: LOW

CVSS Base Score: 2.9

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor: gwenn

Product: libsql-sqlite3-parser

EPSS Score: 0.02% (probability of being exploited)

EPSS Percentile: 2.48% (scored less or equal to compared to others)

EPSS Date: 2025-06-06 (when was this score calculated)

2025-05-09 05:40:10 UTC
CVE

dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.
2025-05-09 16:15:14 UTC
Github Advisory Database (Rust)

[libsql-sqlite3-parser] libsql-sqlite3-parser crash due to invalid UTF-8 input