GitHub Advisoryadvisory · crates.io

GHSA-cpqj-r29q-chrh Loading a bgzip block can write out of bounds if size overflows.

CRITICAL Published 2022-05-24 Modified 2022-06-16 Official page ↗
Aliases
CVE-2021-28027
Ecosystem
crates.io
Packages
bam
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-191
Reviewed
2022-06-16

Affected packages

• crates.io bam: < 0.1.3 → fixed in 0.1.3

Description

An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write during the loading of a bgzip block.

Related

Alias · CVE (1)

  • CVE-2021-28027 An issue was discovered in the bam crate before 0.1.3 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-191 Integer Underflow (Wrap or Wraparound) weakness

References