CVE-2020-36432

An issue was discovered in the algds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new...

toolbox (>=0.2.7-final, <=0.2.8) potentially affected by CVE-2020-36432 via alg_ds (0.2.7)

algds CARGO version 0.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on algds and may be impacted: - toolbox =0.2.7-final, =0.2.8 Source cves: CVE-2020-36432 Source advisory: OSV:GHSA-3VV3-FRRQ-6486...

CVE-2020-36432

CVE-2020-36432 affects the alg_ds crate for Rust (up to 2020-08-25). The issue is a drop of uninitialized memory in Matrix::new(), caused by Matrix::fill_with() using a *ptr = value pattern that assumes an initialized struct at the address, leading to dropping of uninitialized memory. Public refe...

toolbox (>=0.2.7-final, <=0.2.9) potentially affected by CVE-2020-36432 via alg_ds (>=0.2.7, <=0.3.2)

algds CARGO version =0.2.7, =0.2.7-final, =0.2.9 Source cves: CVE-2020-36432 Source advisory: OSV:RUSTSEC-2020-0033...