PT-2024-40925 · Unknown · Fast-Float

Published 2024-10-31 · Updated 2024-10-31

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions fast-float (affected versions not specified)

Description The fast-float library contains soundness issues, including undefined behavior when checking input length and functions marked as safe with non-local safety guarantees. The library is also unmaintained. For parsing floating-point numbers, third-party crates are no longer needed due to a fast float parsing algorithm being merged into libcore.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

RUSTSEC-2024-0379

Affected Products

Fast-Float

References · 6

• https://osv.dev/vulnerability/RUSTSEC-2024-0379 · Vendor Advisory
• https://github.com/aldanor/fast-float-rust/issues/35 · Note
• https://github.com/aldanor/fast-float-rust/issues/37 · Note
• https://github.com/aldanor/fast-float-rust/issues/28 · Note
• https://rustsec.org/advisories/RUSTSEC-2024-0379.html · Note
• https://crates.io/crates/fast-float · Note