GitHub Advisoryadvisory · crates.io

GHSA-58xc-hpvq-8473 Redox UEFI Safe API can cause heap-buffer-overflow

LOW Published 2025-05-06 Modified 2025-05-06 Official page ↗

Ecosystem: crates.io
Packages: redox_uefi_std
Severity: Low
Weaknesses: CWE-122
Reviewed: 2025-05-06

Affected packages

• crates.io redox_uefi_std: >= 0.1.8, < 0.1.14 → fixed in 0.1.14

Description

ffi::nstr() should be marked unsafe, since a pointer to a buffer without a trailing 0 value will cause a heap buffer overflow.

Related

Weakness · CWE (1)

CWE-122 Heap-based Buffer Overflow weakness

References