ABC_Game_Engine (>=0.1.0 <=0.1.2), AskAI (=0.1.0) +42402 more potentially affected by CVE-2020-35861 via bumpalo (>=3.14.0 <=3.20.3)

bumpalo CARGO version =3.14.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6, =0.0.0, =0.1.2, =0.0.0, =0.1.0-beta.1, =0.0.8, =0.1.15 and more Source cves: CVE-2020-35861 Source advisory: OSV:GHSA-VQX7-PW4R-29RR...

CVE-2020-35861

An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys...

CVE-2020-35861

The CVE-2020-35861 issue affects the bumpalo crate for Rust, specifically before version 3.2.1. The realloc functionality can read unknown memory, potentially allowing attackers to read cryptographic keys. No exploit details are provided in the initial/connected documents beyond this description....

ABC_Game_Engine (>=0.1.0 <=0.1.2), AskAI (=0.1.0) +42402 more potentially affected by CVE-2020-35861 via bumpalo (>=3.14.0 <=3.20.3)

bumpalo CARGO version =3.14.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6, =0.0.0, =0.1.2, =0.0.0, =0.1.0-beta.1, =0.0.8, =0.1.15 and more Source cves: CVE-2020-35861 Source advisory: OSV:RUSTSEC-2020-0006...