Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Fizyk20

#32200of 53,632
7.8Total CVSS
Vulnerabilities · 1
PT-2020-6635
7.8
2020-04-09
Unknown · Generic-Array · CVE-2020-36465
**Name of the Vulnerable Software and Affected Versions** generic-array crate versions prior to 0.13.3 **Description** The issue is related to the generic-array crate for Rust, where the arr! macro is used to extend lifetimes, violating soundness. This can lead to memory corruption scenarios, most likely use-after-free. The exploitation of this issue allows a remote attacker to cause a denial of service. **Recommendations** For versions prior to 0.13.3, update to version 0.13.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `arr!` macro to minimize the risk of exploitation.