GitHub Advisoryadvisory · crates.io

GHSA-wqxc-qrq4-w5v4 Update unsound DrainFilter and RString::retain

HIGH Published 2021-08-25 Modified 2022-06-15 Official page ↗

Aliases: CVE-2020-36213
Ecosystem: crates.io
Packages: abi_stable
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-172
Reviewed: 2021-07-26

Affected packages

• crates.io abi_stable: < 0.9.1 → fixed in 0.9.1

Description

An issue was discovered in the abi_stable crate before 0.9.1 for Rust. A retain call can create an invalid UTF-8 string, violating soundness.

Related

Alias · CVE (1)

CVE-2020-36213 An issue was discovered in the abi_stable crate before 0.9.1 for Rust. vulnerability

Weakness · CWE (1)

CWE-172 Improper Encoding or Decoding of Data weakness

References