PT-2020-16216 · Rust+3 · Sized-Chunks Crate+3
Published
2020-09-06
·
Updated
2026-03-23
·
CVE-2020-25796
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
sized-chunks crate versions through 0.6.2
Description
An issue in the sized-chunks crate for Rust can lead to memory-safety problems. Specifically, in the Chunk implementation, the array size is not checked when constructed with
unit(), pair(), or From<InlineArray<A, T>>. Additionally, Clone and insert from are not panic-safe, as a panicking iterator can cause memory safety issues. In the InlineArray implementation, unaligned references may be generated for types with large alignment requirements.Recommendations
For sized-chunks crate versions through 0.6.2, consider updating to a version that addresses these issues. As a temporary workaround, restrict the use of
unit(), pair(), and From<InlineArray<A, T>> in the Chunk implementation, and avoid using Clone and insert from with potentially panicking iterators. Also, be cautious when using InlineArray with types that have large alignment requirements to minimize the risk of generating unaligned references.Exploit
Fix
Improper Validation of Array Index
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Ubuntu
Sized-Chunks Crate