Lucene search

K
osvGoogleOSV:RUSTSEC-2018-0013
HistoryNov 27, 2018 - 12:00 p.m.

Vec-to-vec transmutations could lead to heap overflow/corruption

2018-11-2712:00:00
Google
osv.dev
4

0.002 Low

EPSS

Percentile

61.9%

Affected versions of this crate switched the length and capacity arguments in the Vec::from_raw_parts() constructor,
which could lead to memory corruption or data leakage.

The flaw was corrected by using the constructor correctly.

CPENameOperatorVersion
safe-transmutelt0.10.1
safe-transmutege0.4.0

0.002 Low

EPSS

Percentile

61.9%