GitHub Advisoryadvisory · crates.io

GHSA-r7cj-wmwv-hfw5 `BinaryArray` does not perform bound checks on reading values and offsets

HIGH Published 2022-06-16 Modified 2022-06-16 Official page ↗

Ecosystem: crates.io
Packages: arrow
Severity: High
Reviewed: 2022-06-16

Affected packages

• crates.io arrow: < 6.4.0 → fixed in 6.4.0

Description

`BinaryArray` performs insufficient validation on creation, which allows out-of-bounds reads in safe code.

References