Turso through 0.8.0-pre.8 Out-of-Bounds Read Denial of Service
cve-program · CVE-2026-85698
PublishedTurso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader that uses an attacker-controlled cell-count field without bounds validation. Attackers can craft a malicious database file with a modified cell count value to trigger an index-out-of-bounds panic when querying, causing denial of service in any application that opens untrusted database files.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-85698 · CVE overview and exploitation status
cve-program · CVE-2026-85698
Related changes
Linked by CVE identifierNo related changes are available here.