PT-2025-45787 · Crates.Io · Binary Vec Io

Published 2025-10-22 · Updated 2025-10-22

OSV

CVSS v4.0

7.3

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Safe functions accept a single &T or &mut T but multiply by n to create slices extending beyond allocated memory when n > 1.

These functions use from raw parts to create slices larger than the underlying allocation, violating memory safety.

The binary vec io repository is archived and unmaintained.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

GHSA-WWXP-HXH6-8GF8

Affected Products

Binary Vec Io

References · 5

• https://osv.dev/vulnerability/GHSA-wwxp-hxh6-8gf8 · Vendor Advisory
• https://github.com/RustSec/advisory-db/pull/2428 · Note
• https://github.com/10XGenomics/rust-toolbox · Note
• https://rustsec.org/advisories/RUSTSEC-2025-0109.html · Note
• https://gist.github.com/lewismosciski/57ac3b8b7a861abdd0d7ae6f39de5a9d · Note