Lucene search
+L

1 matches found

OSV
OSV
added 2021/06/06 12:0 p.m.23 views

RUSTSEC-2021-0070 VecStorage Deserialize Allows Violation of Length Invariant

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

9.8CVSS9.4AI score0.01411EPSS
SaveExploits1References3
Rows per page
Query Builder