~ / search / GHSA-j8qq-58cr-8cc7

GHSA-j8qq-58cr-8cc7

Out of bounds read in bra

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-25905

Packages

EcosystemPackageAffectedFixed in
crates.io bra < 0.1.1 0.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

Buffered Random Access (BRA) provides easy random memory access to a sequential source of data in Rust. This is achieved by greedily retaining all memory read from a given source. Buffered Random Access (BRA) provides easy random memory access to a sequential source of data in Rust. An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory.

References

External links from the advisory. They lead to third-party sites.