PT-2024-40967 · Libafl · Libafl
Published
2024-12-19
·
Updated
2024-12-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
LibAFL versions prior to 0.11.2
Description
The issue arises from the misuse of the
slice::from raw parts mut API, where a pointer is misaligned due to a direct cast from u8 to u16 raw pointer, leading to unsound behavior. The problem is resolved by utilizing align offset to ensure memory address alignment for u16 to 2 bytes.Recommendations
For versions prior to 0.11.2, update to version 0.11.2 or later to resolve the issue. As a temporary workaround, consider using
align offset to align memory addresses to 2 bytes for u16 to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Libafl