Turso
Monthly
Out-of-bounds read in Turso through 0.8.0-pre.8 crashes any application that opens a crafted database file, causing denial of service. The table-leaf page reader in `core/storage/pager.rs` accepts the cell-count field from a SQLite page header at face value without validating it against the actual page payload bounds; supplying an inflated count causes an index-out-of-bounds panic in Rust, aborting the host process. No public exploit has been identified and the vulnerability is not listed in CISA KEV; real-world exposure is limited to applications with a file-ingestion pathway that accepts externally supplied database files.
Out-of-bounds read in Turso through 0.8.0-pre.8 crashes any application that opens a crafted database file, causing denial of service. The table-leaf page reader in `core/storage/pager.rs` accepts the cell-count field from a SQLite page header at face value without validating it against the actual page payload bounds; supplying an inflated count causes an index-out-of-bounds panic in Rust, aborting the host process. No public exploit has been identified and the vulnerability is not listed in CISA KEV; real-world exposure is limited to applications with a file-ingestion pathway that accepts externally supplied database files.