PT-2025-45729 · Crates.Io · Orx-Pinned-Vec

Published 2025-10-21 · Updated 2025-10-21

OSV

CVSS v4.0

2.0

Low

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

The safe function index of ptr causes undefined behavior when called with an empty slice.

The issue occurs in the line ptr.add(slice.len() - 1) which underflows when slice.len() is 0, creating a pointer with a massive offset. According to Rust's safety rules, creating such a pointer causes immediate undefined behavior.

Fix

Buffer Overflow

Integer Underflow

Weakness Enumeration

CWE-119

CWE-191

Related Identifiers

GHSA-H5J3-CRG5-8JQM

Affected Products

Orx-Pinned-Vec

References · 6

• https://osv.dev/vulnerability/GHSA-h5j3-crg5-8jqm · Vendor Advisory
• https://github.com/orxfun/orx-pinned-vec · Note
• https://github.com/orxfun/orx-pinned-vec/pull/53 · Note
• https://github.com/orxfun/orx-pinned-vec/commit/4a4007a1aaff25cd417853c76163883a7110e276 · Note
• https://github.com/orxfun/orx-pinned-vec/issues/52 · Note
• https://rustsec.org/advisories/RUSTSEC-2025-0106.html · Note