~ / search / GHSA-x76r-966h-5qv9

GHSA-x76r-966h-5qv9

Out-of-bounds Write in vec-const

Source: GitHub Advisory Database (reviewed) High CVE-2021-45680

Packages

EcosystemPackageAffectedFixed in
crates.io vec-const < 2.0.0 2.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a const slice, leading to memory corruption.

References

External links from the advisory. They lead to third-party sites.