PT-2025-45787 · Crates.Io · Binary Vec Io

Publicado 2025-10-22 · Atualizado 2025-10-22

OSV

CVSS v4.0

7.3

Alta

Vetor base

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Safe functions accept a single &T or &mut T but multiply by n to create slices extending beyond allocated memory when n > 1.

These functions use from raw parts to create slices larger than the underlying allocation, violating memory safety.

The binary vec io repository is archived and unmaintained.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

GHSA-WWXP-HXH6-8GF8

Produtos afetados

Binary Vec Io

Referências · 5

• https://github.com/RustSec/advisory-db/pull/2428 · Nota
• https://github.com/10XGenomics/rust-toolbox · Nota
• https://rustsec.org/advisories/RUSTSEC-2025-0109.html · Nota
• https://gist.github.com/lewismosciski/57ac3b8b7a861abdd0d7ae6f39de5a9d · Nota
• https://osv.dev/vulnerability/GHSA-wwxp-hxh6-8gf8 · Aviso do Fabricante