GitHub Advisoryadvisory · crates.io

GHSA-qgrp-8f3v-q85p `FixedSizeBinaryArray` does not perform bound checks on accessing values and offsets

HIGH Published 2022-06-16 Modified 2022-06-16 Official page ↗

Ecosystem: crates.io
Packages: arrow
Severity: High
Reviewed: 2022-06-16

Affected packages

• crates.io arrow: < 6.4.0 → fixed in 6.4.0

Description

`FixedSizeBinaryArray` performs insufficient bounds checks, which allows out-of-bounds reads in safe code.

References