~ / search / GHSA-c9h5-hf8r-m97x

GHSA-c9h5-hf8r-m97x

Dangling reference in flatbuffers

Source: GitHub Advisory Database (reviewed) High CVE-2020-35864

Packages

EcosystemPackageAffectedFixed in
crates.io flatbuffers >= 0.4.0, < 2.0.0 2.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. read_scalar (and read_scalar_at) can transmute values without unsafe blocks.

References

External links from the advisory. They lead to third-party sites.