RUSTSEC-2020-0042 Missing check in ArrayVec leads to out-of-bounds write.

🗓️ 24 Sep 2020 12:00:00Reported by GoogleType

osv🔗 osv.dev👁 11 Views

Missing check in ArrayVec leads to out-of-bounds write. ArrayVec::insert allows insertion of an element into the array object into the specified index. Due to a missing check on the upperbound of this index, it is possible to write out of bounds

Reporter	Title	Published	Views	Family All 11
CNNVD	Rust Buffer Error Vulnerability	31 Dec 202000:00	–	cnnvd
CVE	CVE-2020-35895	31 Dec 202008:23	–	cve
Cvelist	CVE-2020-35895	31 Dec 202008:23	–	cvelist
EUVD	EUVD-2021-1737	7 Oct 202500:30	–	euvd
Github Security Blog	Out-of-bounds write in stack	25 Aug 202120:49	–	github
NVD	CVE-2020-35895	31 Dec 202010:15	–	nvd
OSV	GHSA-H45V-VGVP-3H5V Out-of-bounds write in stack	25 Aug 202120:49	–	osv
Prion	Design/Logic Flaw	31 Dec 202010:15	–	prion
Positive Technologies	PT-2020-17527 · Rust · Stack Crate	24 Sep 202000:00	–	ptsecurity
RedhatCVE	CVE-2020-35895	22 May 202515:34	–	redhatcve