An issue exists in the rusqlite crate prior to 0.23.0 for Rust. Memory safety can be violated because rusqlite::trace::log mishandles format strings.
rusqlite project rusqlite