GitHub Advisoryadvisory · crates.io

GHSA-x76r-966h-5qv9 Out-of-bounds Write in vec-const

HIGH Published 2022-01-06 Modified 2022-01-07 Official page ↗
Aliases
CVE-2021-45680
Ecosystem
crates.io
Packages
vec-const
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-787
Reviewed
2022-01-06

Affected packages

• crates.io vec-const: < 2.0.0 → fixed in 2.0.0

Description

An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a const slice, leading to memory corruption.

Related

Alias · CVE (1)

  • CVE-2021-45680 An issue was discovered in the vec-const crate before 2.0.0 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References