2 matches found
RUSTSEC-2021-0013 Soundness issues in `raw-cpuid`
Undefined behavior in asstring methods VendorInfo::asstring, SoCVendorBrand::asstring, and ExtendedFunctionInfo::processorbrandstring construct byte slices using std::slice::fromrawparts, with data coming from reprRust structs. This is always undefined behavior. See...
7.5CVSS6.2AI score0.01261EPSS
SaveExploits1References3
PT-2021-16993
Name of the Vulnerable Software and Affected Versions raw-cpuid crate versions prior to 9.0.0 Description The issue is related to unsound transmute calls within as string methods in the raw-cpuid crate for Rust. Specifically, VendorInfo::as string, SoCVendorBrand::as string, and...
7.5CVSS5.9AI score0.01261EPSS
SaveExploits0References16
20