PT-2025-45729 · Crates.Io · Orx-Pinned-Vec

Publicado 2025-10-21 · Atualizado 2025-10-21

OSV

CVSS v4.0

2.0

Baixa

Vetor base

AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

The safe function index of ptr causes undefined behavior when called with an empty slice.

The issue occurs in the line ptr.add(slice.len() - 1) which underflows when slice.len() is 0, creating a pointer with a massive offset. According to Rust's safety rules, creating such a pointer causes immediate undefined behavior.

Correção

Buffer Overflow

Integer Underflow

Enumeração de Fraquezas

CWE-119

CWE-191

Identificadores relacionados

GHSA-H5J3-CRG5-8JQM

Produtos afetados

Orx-Pinned-Vec

Referências · 6

• https://github.com/orxfun/orx-pinned-vec · Nota
• https://github.com/orxfun/orx-pinned-vec/pull/53 · Nota
• https://github.com/orxfun/orx-pinned-vec/commit/4a4007a1aaff25cd417853c76163883a7110e276 · Nota
• https://github.com/orxfun/orx-pinned-vec/issues/52 · Nota
• https://osv.dev/vulnerability/GHSA-h5j3-crg5-8jqm · Aviso do Fabricante
• https://rustsec.org/advisories/RUSTSEC-2025-0106.html · Nota