EUVD-2025-5058

Malicious code in bioql PyPI...

GHSA-QM2P-4W45-V2VR grcov has an out of bounds write triggered by crafted coverage data

Function grcov::covdir::getcoverage uses the unsafe function getuncheckedmut without validating that the index is in bounds. This results in memory corruption, and could potentially allow arbitrary code execution provided that an attacker can feed the tool crafted coverage data...

grcov has an out of bounds write triggered by crafted coverage data

Function grcov::covdir::getcoverage uses the unsafe function getuncheckedmut without validating that the index is in bounds. This results in memory corruption, and could potentially allow arbitrary code execution provided that an attacker can feed the tool crafted coverage data...

htmlentity (>=0.1.0, <=1.2.0), reddb (0.2.0) +2 more potentially affected by unknown CVE via grcov (>=0.5.15, <=0.8.13)

grcov CARGO version =0.5.15, =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-QM2P-4W45-V2VR...

htmlentity (>=0.1.0, <=1.2.0), reddb (0.2.0) +2 more potentially affected by unknown CVE via grcov (>=0.5.15, <=0.8.13)

grcov CARGO version =0.5.15, =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: GHSA-QM2P-4W45-V2VR...

PT-2025-6138

Name of the Vulnerable Software and Affected Versions: grcov affected versions not specified Description: The issue arises from the function grcov::covdir::get coverage utilizing the unsafe function get unchecked mut without proper validation that the index is within bounds. This oversight can le...

Out of bounds write triggered by crafted coverage data

Function grcov::covdir::getcoverage uses the unsafe function getuncheckedmut without validating that the index is in bounds. This results in memory corruption, and could potentially allow arbitrary code execution provided that an attacker can feed the tool crafted coverage data...

htmlentity (>=0.1.0, <=1.2.0), reddb (0.2.0) +2 more potentially affected by unknown CVE via grcov (>=0.5.15, <=0.8.13)

grcov CARGO version =0.5.15, =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0005...

PT-2025-6042

Name of the Vulnerable Software and Affected Versions grcov affected versions not specified Description The issue arises from the function grcov::covdir::get coverage using the unsafe function get unchecked mut without validating that the index is in bounds, leading to memory corruption. This cou...