~ / search / GHSA-h45v-vgvp-3h5v

GHSA-h45v-vgvp-3h5v

Out-of-bounds write in stack

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-35895

Packages

EcosystemPackageAffectedFixed in
crates.io stack < 0.3.1 0.3.1

Details

As written in the advisory (Markdown source, shown as plain text).

ArrayVec::insert allows insertion of an element into the array object into the specified index. Due to a missing check on the upperbound of this index, it is possible to write out of bounds.

References

External links from the advisory. They lead to third-party sites.