WS-2021-0414

In num-bigint before 0.4.3 two scenarios were reported where BigInt and BigUint multiplication may unexpectedly panic . Rust panics can either cause stack unwinding or program abort, depending on the application configuration. In some settings, an unexpected panic may constitute a denial-of-servi...

Unexpected panics in num-bigint

Impact Two scenarios were reported where BigInt and BigUint multiplication may unexpectedly panic. - The internal mac3 function did not expect the possibility of non-empty all-zero inputs, leading to an unwrap panic. - A buffer was allocated with less capacity than needed for an intermediate...

GHSA-V935-PQMR-G8V9 Unexpected panics in num-bigint

Impact Two scenarios were reported where BigInt and BigUint multiplication may unexpectedly panic. - The internal mac3 function did not expect the possibility of non-empty all-zero inputs, leading to an unwrap panic. - A buffer was allocated with less capacity than needed for an intermediate...

PT-2021-24461

Name of the Vulnerable Software and Affected Versions: num-bigint versions 0.4.1 through 0.4.2 Description: The issue arises from two scenarios where BigInt and BigUint multiplication may unexpectedly panic. This occurs due to the internal mac3 function not expecting non-empty all-zero inputs,...