GitHub Advisoryadvisory · crates.io

GHSA-pfp7-vxgr-83pw toodee is vulnerable to Heap Buffer Overflow through its DrainCol Destructor

HIGH Published 2025-09-09 Modified 2025-09-09 Official page ↗
Ecosystem
crates.io
Packages
toodee
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:L/SI:L/SA:L
Weaknesses
CWE-122
Reviewed
2025-09-09

Affected packages

• crates.io toodee: >= 0.2.0, < 0.6.0 → fixed in 0.6.0

Description

An off-by-one error in the `DrainCol::drop` destructor could cause an unsafe memory copy operation to exceed the bounds of the associated vector. The error was related to the size of the data being copied in one of the `ptr::copy` invocations inside the destructor. When removing the first column from a TooDee object, the DrainCol return object could cause a heap buffer overflow vulnerability when it is dropped. The issue was fixed in commit `e6e16d5` by reducing the copied size by one.

Related

Weakness · CWE (1)

  • CWE-122 Heap-based Buffer Overflow weakness

References