HIGH

CVE-2022-35737

CVSS v3

7.5

HIGH

EPSS Score

51.9%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

Technical details

Published
8/3/2022

Frequently asked questions

What is CVE-2022-35737?

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

Is CVE-2022-35737 actively exploited?

Active exploitation of CVE-2022-35737 has not been confirmed. The EPSS score is 51.9%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2022-35737?

CVE-2022-35737 has a CVSS v3 base score of 7.5 (HIGH severity).

Is CVE-2022-35737 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.