PT-2024-40268 · Rust · Rust
Published
2024-12-04
·
Updated
2024-12-04
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions:
Rust (affected versions not specified)
Description:
The issue allows populating a DistributedSlice of a type T with elements of an arbitrary other type that coerces to T. This means elements of one type could end up in a slice of another type if the first type coerces to the second. For example, elements of type
&&str could be in a slice of type &str because &&str coerces to &str. The problem was fixed by adding type checking to prevent such coercion, ensuring the element's type is a subtype of the slice's declared element type.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Rust