~ / search / GHSA-qx2v-8332-m4fv

GHSA-qx2v-8332-m4fv

slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-55159

Packages

EcosystemPackageAffectedFixed in
crates.io slab >= 0.4.10, < 0.4.11 0.4.11

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact The `get_disjoint_mut` method in slab v0.4.10 incorrectly checked if indices were within the slab's capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes. ### Patches This has been fixed in slab v0.4.11. ### Workarounds Avoid using `get_disjoint_mut` with indices that might be beyond the slab's actual length, or upgrade to v0.4.11 or later. ### References - [https://github.com/tokio-rs/slab/pull/152](https://github.com/tokio-rs/slab/pull/152)

References

External links from the advisory. They lead to third-party sites.