CVE-2022-35737

Description from NVD

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

Information Acquisition Date:2022-11-10T18:24Z

CVSS 2.0: 0.0 None CVSS 3.x: 7.5 HIGH

NVD References

https://kb.cert.org/vuls/id/720344
source:MISC
tags:Broken Link Third Party Advisory US Government Resource

This vulnerability may involve a PoC.

Refer to Information on External Sites

CVE Infomation

Exploits or more Infomation

List of frequently cited URLs

URL	Num of Times Referred to
https://cvetrends.com	50
https://blog.trailofbits.com/2022/10/25/sqlite-vulnerabilit...	7
https://noticiasseguridad.com/vulnerabilidades/una-vulnerab...	5
https://thehackernews.com/2022/10/22-year-old-vulnerability...	4
https://securityaffairs.co/wordpress/137629/hacking/cve-202...	4
https://twitter.com/__kokumoto/status/1584926088844972032	3

Information from Twitter

User	URL	Info Source	Date
sidfm_jp	https://sid.softek.jp/content/show/44883	Source sidfm_jp 1622822487150182403	2023/02/07
0xor0ne	https://blog.trailofbits.com/2022/10/25/sqlite-vulnerabilit...	Source 0xor0ne 1637869169134690305	2023/03/21
0xor0ne	https://twitter.com/0xor0ne/status/1637869169134690305/photo/1	Source 0xor0ne 1637869169134690305	2023/03/21
ipssignatures	https://twitter.com/0xor0ne/status/1637869169134690305	Source ipssignatures 1637968767178231815	2023/03/21
ipssignatures	https://twitter.com/0xor0ne/status/1637869169134690305	Source ipssignatures 1638210864288284675	2023/03/22

URL

Num of Times Referred to

User

URL

Info Source

sidfm_jp

0xor0ne

0xor0ne