PT-2025-20471 · Unknown · Libsql-Sqlite3-Parser

Cxworks · Published 2025-05-09 · Updated 2025-05-09 · CVE-2025-47736

Positive Technologies (AI Summary)

CVSS v3.1

2.9

Low

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions libsql-sqlite3-parser versions 0.13.0 and earlier

Description The issue is related to the dialect/mod.rs file in the libsql-sqlite3-parser crate for Rust, which can crash if the input is not valid UTF-8.

Recommendations For versions 0.13.0 and earlier, consider validating input data to ensure it is valid UTF-8 before processing it to prevent potential crashes. As a temporary workaround, consider implementing input validation checks to handle non-UTF-8 input gracefully until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-228

Related Identifiers

CVE-2025-47736

GHSA-8M95-FFFC-H4C5

Affected Products

Libsql-Sqlite3-Parser

References · 11

• 🔥 https://github.com/gwenn/lemon-rs/issues/86 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-47736 · Security Note
• https://osv.dev/vulnerability/GHSA-8m95-fffc-h4c5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-47736 · Vendor Advisory
• https://github.com/tursodatabase/libsql/issues/2052 · Note
• https://github.com/gwenn/lemon-rs/pull/8 · Note
• https://t.me/cvenotify/121508 · Telegram Post
• https://t.me/cvetracker/23439 · Telegram Post
• https://t.me/cvedetector/24907 · Telegram Post
• https://twitter.com/CVEnew/status/1920709322851459093 · Twitter Post
• https://crates.io/crates/libsql-sqlite3-parser · Note