Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2023/09/04 5:2 p.m.17 views

Multiple soundness issues in lexical

lexical contains multiple soundness issues: 1. Bytes::read allows creating instances of types with invalid bit patterns 1. BytesIter::read advances iterators out of bounds 1. The BytesIter trait has safety invariants but is public and not marked unsafe 1. writefloat calls MaybeUninit::assumeinit ...

7.2AI score
Exploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:24 a.m.1 views

SUSE CVE-2022-36086

linkedlistallocator is an allocator usable for nostd systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than 3 sizeof:: because...

9.8CVSS6.9AI score0.00297EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/09/07 10:50 p.m.12 views

CVE-2022-36086 linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`

linkedlistallocator is an allocator usable for nostd systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than 3 sizeof:: because...

8.4CVSS9.7AI score0.00297EPSS
Exploits1References2
CVE
CVE
added 2022/09/07 10:50 p.m.55 views

CVE-2022-36086

CVE-2022-36086 relates to the Rust crate linked_list_allocator (no_std). Prior to 0.10.2, heap initialization methods could perform out-of-bounds writes when the heap size was too small (less than 3 × size_of::) due to metadata writes, affecting Heap::new, Heap::init, Heap::init_from_slice, Locke...

9.8CVSS9.2AI score0.00297EPSS
Exploits1References2Affected Software1
Kitploit
Kitploit
added 2021/05/04 12:30 p.m.45 views

LibAFL - Advanced Fuzzing Library - Slot Your Fuzzer Together In Rust! Scales Across Cores And Machines. For Windows, Android, MacOS, Linux, No_Std, ...

Advanced Fuzzing Library - Slot your own fuzzers together and extend their features using Rust. LibAFL is written and maintained by Andrea Fioraldi [email protected] and Dominik Maier [email protected]. Why LibAFL? LibAFL gives you many of the benefits of an off-the-shelf fuzzer, while...

7.4AI score
Exploits0References12
OSV
OSV
added 2019/11/21 12:0 p.m.10 views

RUSTSEC-2019-0031 spin is no longer actively maintained

The author of the spin crate does not have time or interest to maintain it. Consider the following alternatives all of which support nostd: - conquer-once - lockapi a subproject of parkinglot - spinningtop spinlock crate built on lockapi - spinning...

7.1AI score
Exploits0References3
RustSec
RustSec
added 2019/11/21 12:0 p.m.13 views

spin is no longer actively maintained

The author of the spin crate does not have time or interest to maintain it. Consider the following alternatives all of which support nostd: - conquer-once - lockapi a subproject of parkinglot - spinningtop spinlock crate built on lockapi - spinning...

2.3AI score
Exploits0Affected Software1
Rows per page
Query Builder