12399 matches found
RUSTSEC-2025-0063 Possible unsound public API
The public accessible struct SyncVec has a public safe method getunchecked. It accept a parameter index and used in the getunchecked without sufficient checks as mentioned here...
Possible unsound public API
The public accessible struct SyncVec has a public safe method getunchecked. It accept a parameter index and used in the getunchecked without sufficient checks as mentioned here...
alloy-rs (0.2.1), anndata (0.2.0) +77 more potentially affected by unknown CVE via arrow2 (>=0.5.3, <=0.18.0)
arrow2 CARGO version =0.5.3, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.0.1, =0.2.1, =0.2.2, =0.1.0, =0.1.0, =0.15.0, =0.16.0 - geoarrow-wasm 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0038...
RUSTSEC-2025-0164 `DTriangle` accessors may read out of bounds in affected versions
In affected versions, DTriangle::neighborbyorder and DTriangle::vertexbyorder were public safe functions that accepted an arbitrary order value. These functions used order to access fixed-size internal arrays with getunchecked, without checking whether order was within bounds. Calling these metho...
`FormatContext` stream accessors can cause undefined behavior from safe code
Affected versions of stainlessffmpeg exposed several safe public methods on FormatContext that accepted a streamindex parameter and used it in unsafe pointer operations without checking whether the index was valid. These methods performed pointer arithmetic and dereferenced the resulting stream...
`hugepage_rs::dealloc` may allow invalid memory deallocation from safe code
hugepagers::dealloc was a publicly accessible safe function. It accepted an arbitrary raw pointer and Layout, then forwarded them to the hugepage allocator's GlobalAlloc::dealloc implementation. GlobalAlloc::dealloc requires callers to ensure that the pointer denotes a block of memory currently...
PT-2025-17866 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A critical bug in the Rust-Miniscript satisfier causes crashes when compiling certain threshold descriptors, such as 3-of-3 with mixed conditions. No funds were lost due to this issue...
RUSTSEC-2025-0162 `VMABuffer::set_data` may allow out-of-bounds writes from safe code
VMABuffer::setdata was a publicly accessible safe function. It accepted an arbitrary offset and a data slice, then used the offset in unsafe pointer arithmetic before copying the slice into a mapped allocation. Affected versions did not check that the requested write range fit within the allocati...
aabb_physics (>=0.1.0, <=0.1.1), acolor (>=0.0.2, <=0.0.11) +117 more potentially affected by unknown CVE via macroquad (>=0.2.9, <=0.4.16)
macroquad CARGO version =0.2.9, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0035...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
Video Tutorial !CVE-2025-24071 Demohttps://img.youtube.co...
[SECURITY] Fedora 41 Update: rust-zip-2.6.1-1.fc41
Library to support the reading and writing of zip files...
[SECURITY] Fedora 41 Update: rust-url-2.5.4-1.fc41
URL library for Rust, based on the WHATWG URL Standard...
[SECURITY] Fedora 41 Update: rust-version-ranges-0.1.1-2.fc41
Performance-optimized type for generic version ranges and operations on them...
[SECURITY] Fedora 41 Update: rust-zerovec-0.10.4-4.fc41
Zero-copy vector backed by a byte array...
[SECURITY] Fedora 41 Update: rust-utf16_iter-1.0.5-1.fc41
Iterator by char over potentially-invalid UTF-16 in &u16...
[SECURITY] Fedora 41 Update: rust-tinystr-0.7.6-4.fc41
A small ASCII-only bounded length string representation...
[SECURITY] Fedora 41 Update: rust-sequoia-openpgp1-1.22.0-2.fc41
OpenPGP data types and associated machinery...
[SECURITY] Fedora 41 Update: rust-sequoia-openpgp-2.0.0-2.fc41
OpenPGP data types and associated machinery...