GitHub Advisoryadvisory · crates.io

GHSA-hc92-9h3m-c39j Incorrect cast in anymap

CRITICAL Published 2021-08-25 Modified 2021-08-18 Official page ↗

Aliases: CVE-2021-38187
Ecosystem: crates.io
Packages: anymap
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-681, CWE-704
Reviewed: 2021-08-18

Affected packages

• crates.io anymap: <= 0.12.1 (no fix yet)

Description

An issue was discovered in the anymap crate through 0.12.1 for Rust. It violates soundness via conversion of a *u8 to a *u64.

Related

Alias · CVE (1)

CVE-2021-38187 An issue was discovered in the anymap crate through 0.12.1 for Rust. vulnerability

Weakness · CWE (2)

CWE-681 Incorrect Conversion between Numeric Types weakness
CWE-704 Incorrect Type Conversion or Cast weakness

References