EUVD-2021-1852

Malware in sbrugna...

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

gltfgen (>=0.4.5, <=0.5.0), gut (>=0.5.0, <=0.6.2) potentially affected by CVE-2020-35903 via dync (>=0.3.2, <=0.4.0)

dync CARGO version =0.3.2, =0.4.5, =0.5.0, =0.6.2 Source cves: CVE-2020-35903 Source advisory: OSV:GHSA-QXJQ-V4WF-PPVH...

Out of bounds read in dync

VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...

GHSA-QXJQ-V4WF-PPVH Out of bounds read in dync

VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

Design/Logic Flaw

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

CVE-2020-35903

CVE-2020-35903 affects the Rust dync crate prior to 0.5.0, where VecCopy can misalign elements because Vec may store non-u8 types. This enables misaligned access when reading/writing elements of different types. The issue is documented across multiple sources (e.g., RustSec/RUSTSEC-2020-0050 and ...

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

Rust Security Vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in dync crate before 0.5.0 for Rust that allows access to unaligned elements, as u8 is not always a problematic type...

CVE-2020-35903: Undefined Security Weakness

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

gltfgen (>=0.4.5, <=0.5.0), gut (>=0.5.0, <=0.6.2) potentially affected by CVE-2020-35903 via dync (>=0.3.2, <=0.4.0)

dync CARGO version =0.3.2, =0.4.5, =0.5.0, =0.6.2 Source cves: CVE-2020-35903 Source advisory: OSV:RUSTSEC-2020-0050...

PT-2020-17535

Name of the Vulnerable Software and Affected Versions dync crate versions prior to 0.5.0 Description An issue in the dync crate allows misaligned element access because the type in question is not always u8. Specifically, VecCopy::data is created as a Vec of u8 but can be used to store and retrie...