PT-2022-37431 · Unknown · Parity-Util-Mem

Published 2022-11-30 · Updated 2022-11-30

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions parity-util-mem (affected versions not specified)

Description The issue concerns the use of a global allocator that may lead to undefined behavior (UB). There is a warning related to its use.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

RUSTSEC-2022-0080

Affected Products

Parity-Util-Mem

References · 6

• https://osv.dev/vulnerability/RUSTSEC-2022-0080 · Vendor Advisory
• https://github.com/paritytech/parity-common/pull/696 · Note
• https://github.com/paritytech/parity-common/pull/697 · Note
• https://github.com/paritytech/parity-common/issues/607 · Note
• https://crates.io/crates/parity-util-mem · Note
• https://rustsec.org/advisories/RUSTSEC-2022-0080.html · Note