GitHub Advisoryadvisory · crates.io
GHSA-mrrw-grhq-86gf Ascii (crate) allows out-of-bounds array indexing in safe code
MEDIUM
Official page ↗
- Ecosystem
- crates.io
- Packages
- ascii
- Severity
- Moderate
- Weaknesses
- CWE-119
- Reviewed
- 2023-02-28
Affected packages
• crates.io ascii: >= 0.7.0, < 0.9.3 → fixed in 0.9.3
Description
Affected version of this crate had implementation of `From` for `&mut [u8]` and `&mut str`. This can result in out-of-bounds array indexing in safe code.
The flaw was corrected in commit 8a6c779 by removing those impls.
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness