~ / search / GHSA-cpqj-r29q-chrh

GHSA-cpqj-r29q-chrh

Loading a bgzip block can write out of bounds if size overflows.

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-28027

Packages

EcosystemPackageAffectedFixed in
crates.io bam < 0.1.3 0.1.3

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write during the loading of a bgzip block.

References

External links from the advisory. They lead to third-party sites.