CVE-2025-47736

Description

dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.

PUBLISHED Reserved 2025-05-09 | Published 2025-05-09 | Updated 2025-05-09 | Assigner mitre

Problem types

CWE-228 Improper Handling of Syntactically Invalid Structure

Product status

References

github.com/gwenn/lemon-rs/issues/86 exploit

github.com/tursodatabase/libsql/issues/2052

github.com/gwenn/lemon-rs/issues/86

github.com/gwenn/lemon-rs/pull/8

crates.io/crates/libsql-sqlite3-parser

cve.org (CVE-2025-47736)

nvd.nist.gov (CVE-2025-47736)

Download JSON