Lucene search
+L

5 matches found

OSV
OSV
•added 2026/05/02 12:00 p.m.•13 views

RUSTSEC-2026-0129 Buffer overflow in `Clusterings::from_i32_column_major_order()`

The fromi32columnmajororder method can create inconsistent internal state. When labels length and nitems mismatch, nclusterings becomes labels.len / nitems truncated, but subsequent calls to label use indices that exceed the internal data bounds, causing a buffer overflow. For example,...

6AI score
SaveExploits0References3
RustSec
RustSec
•added 2026/05/02 12:00 p.m.•33 views

Buffer overflow in `Clusterings::from_i32_column_major_order()`

The fromi32columnmajororder method can create inconsistent internal state. When labels length and nitems mismatch, nclusterings becomes labels.len / nitems truncated, but subsequent calls to label use indices that exceed the internal data bounds, causing a buffer overflow. For example,...

6AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/05/02 12:00 a.m.•4 views

PT-2026-40736

The from i32 column major order method can create inconsistent internal state. When labels length and n items mismatch, n clusterings becomes labels.len / n items truncated, but subsequent calls to label use indices that exceed the internal data bounds, causing a buffer overflow. For example,...

6.1AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/04/24 3:57 p.m.•26 views

Grid: Integer Overflow in Grid::expand_rows Leads to Safe-API Undefined Behavior

Summary An integer overflow in Grid::expandrows can corrupt the relationship between the grid’s logical dimensions and its backing storage. After the internal invariant is broken, the safe API get may invoke getunchecked with an invalid index, resulting in Undefined Behavior. Details Tested...

6.2CVSS5.8AI score0.00184EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/04/24 3:57 p.m.•53 views

GHSA-38C5-483C-4QQP Grid: Integer Overflow in Grid::expand_rows Leads to Safe-API Undefined Behavior

Summary An integer overflow in Grid::expandrows can corrupt the relationship between the grid’s logical dimensions and its backing storage. After the internal invariant is broken, the safe API get may invoke getunchecked with an invalid index, resulting in Undefined Behavior. Details Tested...

6.2CVSS5.8AI score0.00184EPSS
SaveExploits0References5
Rows per page
Query Builder