Lucene search
+L

2 matches found

OSV
OSV
•added 2021/01/20 12:00 p.m.•22 views

RUSTSEC-2021-0013 Soundness issues in `raw-cpuid`

Undefined behavior in asstring methods VendorInfo::asstring, SoCVendorBrand::asstring, and ExtendedFunctionInfo::processorbrandstring construct byte slices using std::slice::fromrawparts, with data coming from reprRust structs. This is always undefined behavior. See...

7.5CVSS6.2AI score0.01261EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/01/20 12:00 a.m.•6 views

PT-2021-16993

Name of the Vulnerable Software and Affected Versions raw-cpuid crate versions prior to 9.0.0 Description The issue is related to unsound transmute calls within as string methods in the raw-cpuid crate for Rust. Specifically, VendorInfo::as string, SoCVendorBrand::as string, and...

7.5CVSS5.9AI score0.01261EPSS
SaveExploits0References16
Rows per page
Query Builder