11 matches found
abd-clam (>=0.21.6, <=0.21.7), accesskit_windows (>=0.4.0, <=0.15.0) +2045 more potentially affected by unknown CVE via memmap2 (>=0.1.0, <=0.9.10)
memmap2 CARGO version =0.1.0, =0.21.6, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.5, =0.18.0, =0.0.7, =0.0.8, =0.7.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0186...
Unchecked pointer offset in crate `memmap2`
Affected versionf of memmap2 did not perform enough validation on the offset and len parameters of Mmap::uncheckedadviserange, MmapMut::uncheckedadviseranage and MmapMut::flushasyncrange. This can cause undefined behavior due to invalid values being passed to pointer::offset and pointer::add when...
PT-2026-53939
Affected versionf of memmap2 did not perform enough validation on the offset and len parameters of Mmap::unchecked advise range, MmapMut::unchecked advise ranage and MmapMut::flush async range. This can cause undefined behavior due to invalid values being passed to pointer::offset and pointer::ad...
PT-2025-62955
maxminddb prior to version 0.27 declared Reader::open mmap as safe despite wrapping an inherently unsafe memmap2 operation with no extra step done to guarantee safety. This could have led to undefined behaviour if the file were to be modified on disk while the memory map was still active...
RUSTSEC-2025-0132 `Reader::open_mmap` unsoundly marks unsafe memmap operation as safe
maxminddb prior to version 0.27 declared Reader::openmmap as safe despite wrapping an inherently unsafe memmap2 operation with no extra step done to guarantee safety. This could have led to undefined behaviour if the file were to be modified on disk while the memory map was still active...
mmap unmaintained
The mmap crate is unmaintained as its repository has been archived on Feb 10, 2022. The main alternative seems to be memmap2 crate...
RUSTSEC-2024-0394 mmap unmaintained
The mmap crate is unmaintained as its repository has been archived on Feb 10, 2022. The main alternative seems to be memmap2 crate...
mapr is Unmaintained
The mapr fork has been merged back into upstream fork memmap2. The maintainers have advised mapr is deprecated and will not receive any maintenance in favor of using memmap2. Possible Alternatives The below list has not been vetted in any way and may or may not contain alternatives; - memmap2...
RUSTSEC-2022-0053 mapr is Unmaintained
The mapr fork has been merged back into upstream fork memmap2. The maintainers have advised mapr is deprecated and will not receive any maintenance in favor of using memmap2. Possible Alternatives The below list has not been vetted in any way and may or may not contain alternatives; - memmap2...
PT-2022-37422
Name of the Vulnerable Software and Affected Versions memmap2 affected versions not specified mapr all versions Description The mapr fork has been deprecated in favor of memmap2. The maintainer advises against using mapr as it will not receive any maintenance. Recommendations For mapr, consider...