CyberRota Analysis
AI-GeneratedTurso versions up to 0.8.0-pre.8 are vulnerable to an out-of-bounds read issue in the table-leaf page reader, allowing attackers to exploit a manipulated cell-count field. This can lead to an index-out-of-bounds panic, resulting in a denial of service for applications that process untrusted database files. Organizations using Turso should prioritize patching this vulnerability to safeguard against potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader that uses an attacker-controlled cell-count field without bounds validation. Attackers can craft a malicious database file with a modified cell count value to trigger an index-out-of-bounds panic when querying, causing denial of service in any application that opens untrusted database files.