Lucene search

K
osvGoogleOSV:GHSA-PMCV-MGCF-RVXG
HistoryJun 16, 2022 - 11:51 p.m.

Non-aligned u32 read in Chacha20 encryption and decryption

2022-06-1623:51:32
Google
osv.dev
5

0.001 Low

EPSS

Percentile

50.5%

The implementation does not enforce alignment requirements on input slices while incorrectly assuming 4-byte alignment through an unsafe call to std::slice::from_raw_parts_mut, which breaks the contract and introduces undefined behavior.

This affects Chacha20 encryption and decryption in crypto2.

CPENameOperatorVersion
crypto2le0.1.2

0.001 Low

EPSS

Percentile

50.5%

Related for OSV:GHSA-PMCV-MGCF-RVXG