EUVD-2021-1852

Malware in sbrugna...

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

Out of bounds read in dync

VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...

gltfgen (>=0.4.5 <=0.5.0), gut (>=0.5.0 <=0.6.2) potentially affected by CVE-2020-35903 via dync (>=0.3.2 <=0.4.0)

dync CARGO version =0.3.2, =0.4.5, =0.5.0, =0.6.2 Source cves: CVE-2020-35903 Source advisory: OSV:GHSA-QXJQ-V4WF-PPVH...

GHSA-QXJQ-V4WF-PPVH Out of bounds read in dync

VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

Design/Logic Flaw

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

CVE-2020-35903

CVE-2020-35903 affects the Rust dync crate prior to 0.5.0, where VecCopy can misalign elements because Vec may store non-u8 types. This enables misaligned access when reading/writing elements of different types. The issue is documented across multiple sources (e.g., RustSec/RUSTSEC-2020-0050 and ...

Rust Security Vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in dync crate before 0.5.0 for Rust that allows access to unaligned elements, as u8 is not always a problematic type...

gltfgen (>=0.4.5 <=0.5.0), gut (>=0.5.0 <=0.6.2) potentially affected by CVE-2020-35903 via dync (>=0.3.2 <=0.4.0)

dync CARGO version =0.3.2, =0.4.5, =0.5.0, =0.6.2 Source cves: CVE-2020-35903 Source advisory: OSV:RUSTSEC-2020-0050...