~ / search / GHSA-jjx5-3f36-6927

GHSA-jjx5-3f36-6927

Incorrect buffer size calculation in iced-x86

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-38188

Packages

EcosystemPackageAffectedFixed in
crates.io iced-x86 < 1.11.0 1.11.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new(), slice.get_unchecked(slice.length()) is used unsafely.

References

External links from the advisory. They lead to third-party sites.