ZeroDay Findings
Sign inSign up

Findings

CVE-2022-35737

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

Published Aug 3, 2022 · updated Oct 14, 2026 · sqlite sqlite

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 3, 2022 · NIST NVD

    Detected

    SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

  2. Oct 14, 2026 · NIST NVD

    Updated

    SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

Affected

  • cpe netapp/ontap select deploy administration utilityversion unspecified
  • cpe splunk/universal forwarderversion unspecified
  • cpe splunk/universal forwarder9.1.0
  • cpe sqlite/sqliteversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2022-35737

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2022-35737

    30-day exploitation probability 23.3%

    first.org
  • NIST NVDVulnerability recordCVE-2022-35737

    SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

    nvd.nist.gov

References