PT-2026-40737 · Crates.Io · Caja
Published
2026-05-02
·
Updated
2026-05-02
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The
Index and IndexMut implementations for Caja use unchecked pointer
arithmetic without bounds validation. Creating a Caja with a small key and
then accessing an out-of-range index causes out-of-bounds reads or writes
beyond the allocated memory.This can be triggered through safe public APIs — the
[] indexing operator
on a Caja with an out-of-range index — with no unsafe required from the
caller. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Caja