12399 matches found
PT-2025-24273
Name of the Vulnerable Software and Affected Versions user's crate for Rust affected versions not specified Description A flaw was found in the user's crate for Rust, allowing privilege escalation via incorrect group listing. This occurs when a user or process has fewer than exactly 1024 groups,...
accountnovafi (>=0.1.0, <=0.2.0), accountnovafi1 (0.1.0) +708 more potentially affected by unknown CVE via libsecp256k1 (>=0.1.3, <=0.7.2)
libsecp256k1 CARGO version =0.1.3, =0.1.0, =0.1.0, =1.0.5, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.3.0, =0.3.2, =0.3.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0161...
avery (>=0.1.0, <=0.7.1), bibjoin (>=0.1.2, <=0.2.1) +64 more potentially affected by unknown CVE via fast-float (0.2.0)
fast-float CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fast-float and may be impacted: - avery =0.1.0, =0.1.2, =0.1.0, =0.13.0, =0.19.0, =0.4.1, =0.6.2, =0.3.2, =0.4.1, =0.3.2, =0.3.2, =0.1.0, =1.0.8, =1.1.0 and more Source cves...
RUSTSEC-2025-0002 Segmentation fault due to lack of bound check
In this case, the "fastfloat2::common::AsciiStr::first" method within the "AsciiStr" struct uses the unsafe keyword to reading from memory without performing bounds checking. Specifically, it directly dereferences a pointer offset by "self.ptr". Because of the above reason, the method accesses...
htmlentity (>=0.1.0, <=1.2.0), reddb (0.2.0) +2 more potentially affected by unknown CVE via grcov (>=0.5.15, <=0.8.13)
grcov CARGO version =0.5.15, =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0005...
Segmentation fault due to lack of bound check
In this case, the "fastfloat2::common::AsciiStr::first" method within the "AsciiStr" struct uses the unsafe keyword to reading from memory without performing bounds checking. Specifically, it directly dereferences a pointer offset by "self.ptr". Because of the above reason, the method accesses...
PT-2025-5674
Name of the Vulnerable Software and Affected Versions: fast-float affected versions not specified Description: The issue arises from the fast float::common::AsciiStr::first method within the AsciiStr struct, which uses the unsafe keyword to read from memory without performing bounds checking. It...
CVE-2021-46023 affecting package rust 1.72.0-15
CVE-2021-46023 affecting package rust 1.72.0-15. This CVE either no longer is or was never applicable...
CVE-2023-0286 affecting package rust 1.59.0-1
CVE-2023-0286 affecting package rust 1.59.0-1. This CVE either no longer is or was never applicable...
CVE-2023-23915 affecting package rust 1.59.0-1
CVE-2023-23915 affecting package rust 1.59.0-1. No patch is available currently...
CVE-2023-0215 affecting package rust 1.59.0-1
CVE-2023-0215 affecting package rust 1.59.0-1. This CVE either no longer is or was never applicable...
CVE-2023-22466 affecting package rust 1.59.0-1
CVE-2023-22466 affecting package rust 1.59.0-1. This CVE either no longer is or was never applicable...
CVE-2023-23916 affecting package rust 1.59.0-1
CVE-2023-23916 affecting package rust 1.59.0-1. No patch is available currently...
CVE-2022-46176 affecting package rust 1.59.0-1
CVE-2022-46176 affecting package rust 1.59.0-1. No patch is available currently...
CVE-2021-46023 affecting package rust 1.59.0-1
CVE-2021-46023 affecting package rust 1.59.0-1. This CVE either no longer is or was never applicable...
CVE-2023-23914 affecting package rust 1.59.0-1
CVE-2023-23914 affecting package rust 1.59.0-1. This CVE either no longer is or was never applicable...
CVE-2022-4304 affecting package rust 1.59.0-1
CVE-2022-4304 affecting package rust 1.59.0-1. This CVE either no longer is or was never applicable...
CVE-2022-4450 affecting package rust 1.59.0-1
CVE-2022-4450 affecting package rust 1.59.0-1. This CVE either no longer is or was never applicable...