PT-2025-36675 · Crates.Io · Toodee
Publicado
2025-05-22
·
Atualizado
2025-05-22
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
An off-by-one error in the
DrainCol::drop destructor could cause an unsafe memory copy
operation to exceed the bounds of the associated vector.The error was related to the size of the data being copied in one of the
ptr::copy
invocations inside the destructor.When removing the first column from a TooDee object, the DrainCol return object could cause
a heap buffer overflow vulnerability when it is dropped.
The issue was fixed in commit
e6e16d5 by reducing the copied size by one. Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Toodee