PT-2025-6042 · Grcov · Grcov

Published 2025-01-13 · Updated 2025-01-13

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions grcov (affected versions not specified)

Description The issue arises from the function grcov::covdir::get coverage using the unsafe function get unchecked mut without validating that the index is in bounds, leading to memory corruption. This could potentially allow arbitrary code execution if an attacker can provide crafted coverage data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

RUSTSEC-2025-0005

Affected Products

Grcov

References · 4

• https://osv.dev/vulnerability/RUSTSEC-2025-0005 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1917475 · Note
• https://rustsec.org/advisories/RUSTSEC-2025-0005.html · Note
• https://crates.io/crates/grcov · Note