PT-2024-40912 · Rust+1 · Rust+1
Published
2024-07-01
·
Updated
2024-07-01
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
SoftwareX versions prior to 0.9.7
SoftwareX versions prior to 0.10.3
Description
The issue arises from unsafe memory accesses due to the assumption that
#[repr(packed)] guarantees a specific field order in structs. However, the Rust specification does not provide such a guarantee. A change starting from version 1.80.0-beta of Rust reorders fields of #[repr(packed)] structs, leading to illegal memory accesses.Recommendations
For versions prior to 0.9.7, update to version 0.9.7 or later to resolve the issue.
For versions prior to 0.10.3, update to version 0.10.3 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Rust
Softwarex