PT-2025-46131 · Crates.Io · Orx-Pinned-Vec

Publicado 2025-10-21 · Atualizado 2025-10-21

OSV

The safe function index of ptr causes undefined behavior when called with an empty slice.

The issue occurs in the line ptr.add(slice.len() - 1) which underflows when slice.len() is 0, creating a pointer with a massive offset. According to Rust's safety rules, creating such a pointer causes immediate undefined behavior.

Identificadores relacionados

RUSTSEC-2025-0106

Produtos afetados

Orx-Pinned-Vec

Referências · 5

• https://github.com/orxfun/orx-pinned-vec/pull/53 · Nota
• https://github.com/orxfun/orx-pinned-vec/issues/52 · Nota
• https://rustsec.org/advisories/RUSTSEC-2025-0106.html · Nota
• https://osv.dev/vulnerability/RUSTSEC-2025-0106 · Aviso do Fabricante
• https://crates.io/crates/orx-pinned-vec · Nota