Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2022-35737

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2022-35737.

Coverage Span: 2022-10-25
Reports: 1 related reports

Associated Reports & Timeline

Stranger Strings: An exploitable flaw in SQLite

Trail of Bits discloses CVE-2022-35737 in SQLite's printf implementation: present since 2000, fixed in 3.39.2. Large strings with %Q/%q/%w format types cause crashes on 64-bit systems, and the ! unicode flag enables worst-case arbitrary code execution.