EUVD-2021-1552

Malware in sbrugna...

CVE-2021-38190

An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count...

An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count.

...

Out of bounds write in nalgebra

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

GHSA-3W8G-XR3F-2MP8 Out of bounds write in nalgebra

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

abbegm (>=0.1.0, <=0.5.0), acacia (0.2.0) +561 more potentially affected by CVE-2021-38190 via nalgebra (>=0.11.2, <=0.26.2)

nalgebra CARGO version =0.11.2, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.11.0, =0.2.0, =0.1.0, =0.3.0 - amethyst-navigation 0.1.0 and more Source cves: CVE-2021-38190 Source advisory: OSV:GHSA-3W8G-XR3F-2MP8...

Mozilla Rust Code Execution Vulnerability (CNVD-2021-61410)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A code execution vulnerability exists in nalgebra crate prior to Mozilla Rust 0.27.1, which stems from the failure of nalgebra crate to ensure that the number of elements equals the product of the number of rows...

AZL-41989 CVE-2021-38190 affecting package librsvg2 for versions less than 2.58.1-1

An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count...

CVE-2021-38190

An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count...

CVE-2021-38190

An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count...

Design/Logic Flaw

An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count...

CVE-2021-38190

An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count...

CVE-2021-38190

An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count...

CVE-2021-38190

CVE-2021-38190 affects the Rust crate nalgebra prior to 0.27.1, where out-of-bounds memory access can occur because the number of elements is not guaranteed to equal nrows * ncols during deserialization or storage handling. The issue is caused by an invariant not being maintained in the matrix/ve...

CVE-2021-38190

An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count...

CVE-2021-38190: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count...

Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A code execution vulnerability exists in nalgebra crate prior to Mozilla Rust 0.27.1, which stems from the failure of nalgebra crate to ensure that the number of elements equals the product of the number of rows...

PT-2021-24425

Name of the Vulnerable Software and Affected Versions: nalgebra versions 0.11.0 through 0.16.13 Description: The issue arises from the Deserialize implementation for VecStorage, which failed to maintain the invariant that the number of elements must equal nrows ncols. This could allow memory acce...

VecStorage Deserialize Allows Violation of Length Invariant

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

abbegm (>=0.1.0, <=0.5.0), acacia (0.2.0) +561 more potentially affected by CVE-2021-38190 via nalgebra (>=0.11.2, <=0.26.2)

nalgebra CARGO version =0.11.2, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.11.0, =0.2.0, =0.1.0, =0.3.0 - amethyst-navigation 0.1.0 and more Source cves: CVE-2021-38190 Source advisory: OSV:RUSTSEC-2021-0070...