GHSA-3358-4f7f-p4j4
Use after free in generic-array
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| crates.io | generic-array | >= 0.13.0, < 0.13.3 | 0.13.3 |
| crates.io | generic-array | >= 0.12.0, < 0.12.4 | 0.12.4 |
| crates.io | generic-array | >= 0.11.0, < 0.11.2 | 0.11.2 |
| crates.io | generic-array | >= 0.10.0, < 0.10.1 | 0.10.1 |
| crates.io | generic-array | >= 0.8.0, < 0.9.1 | 0.9.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes.
References
External links from the advisory. They lead to third-party sites.