PT-2025-5673 · Crates.Io · Fast-Float2
Published
2025-01-13
·
Updated
2025-01-13
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions:
No specific software or version is mentioned, so the information cannot be determined.
Description:
The issue arises from the
fast float2::common::AsciiStr::first method within the AsciiStr struct, which uses the unsafe keyword to read from memory without performing bounds checking. It directly dereferences a pointer offset by self.ptr. This method accesses an invalid memory address when given an empty string as input, violating Rust's memory safety guarantees. The issue can lead to invalid memory access if an empty buffer is provided.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Fast-Float2