10775 matches found
CVE-2024-58253
CVE-2024-58253 affects the Rust crate obfstr prior to 0.4.4. The issue is that the obfstr! argument type is not restricted to string slices, which can cause an invalid UTF-8 conversion and produce an invalid value. The vulnerability is tied to versions before 0.4.4; updating to 0.4.4 or later res...
audio-video-metadata (>=0.1.0, <=0.1.7), fselect (>=0.3.2, <=0.8.11) +4 more potentially affected by unknown CVE via mp3-metadata (>=0.1.1, <=0.3.4)
mp3-metadata CARGO version =0.1.1, =0.1.0, =0.3.2, =0.1.2, =0.1.0, =0.2.2 Source cves: unknown CVE Source advisory: OSV:GHSA-927Q-G9W9-PM54...
VApps: Verifiable Applications at Internet Scale
Blockchain technology promises a decentralized, trustless, and interoperable infrastructure. However, widespread adoption remains hindered by issues such as limited scalability, high transaction costs, and the complexity of maintaining coherent verification logic across different blockchain layer...
a3mo_lib (>=0.1.0, <=0.1.1), abra (0.0.1) +4423 more potentially affected by unknown CVE via rustc-serialize (>=0.1.5, <=0.3.25)
rustc-serialize CARGO version =0.1.5, =0.1.0, =0.1.7, =0.2.0-beta.4, =0.0.6, =0.1.0, =0.2.1, =0.1.4, =0.1.1, =0.1.0, =0.9.0, =0.1.0, =0.3.3, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0025...
RUSTSEC-2025-0063 Possible unsound public API
The public accessible struct SyncVec has a public safe method getunchecked. It accept a parameter index and used in the getunchecked without sufficient checks as mentioned here...
Possible unsound public API
The public accessible struct SyncVec has a public safe method getunchecked. It accept a parameter index and used in the getunchecked without sufficient checks as mentioned here...
`FormatContext` stream accessors can cause undefined behavior from safe code
Affected versions of stainlessffmpeg exposed several safe public methods on FormatContext that accepted a streamindex parameter and used it in unsafe pointer operations without checking whether the index was valid. These methods performed pointer arithmetic and dereferenced the resulting stream...
alloy-rs (0.2.1), anndata (0.2.0) +113 more potentially affected by unknown CVE via arrow2 (>=0.5.3, <=0.18.0)
arrow2 CARGO version =0.5.3, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.0.1, =0.1.0, =0.2.1, =0.2.2, =0.4.0, =0.1.0, =0.1.0, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0038...
RUSTSEC-2025-0164 `DTriangle` accessors may read out of bounds in affected versions
In affected versions, DTriangle::neighborbyorder and DTriangle::vertexbyorder were public safe functions that accepted an arbitrary order value. These functions used order to access fixed-size internal arrays with getunchecked, without checking whether order was within bounds. Calling these metho...
PT-2025-17866 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A critical bug in the Rust-Miniscript satisfier causes crashes when compiling certain threshold descriptors, such as 3-of-3 with mixed conditions. No funds were lost due to this issue...
RUSTSEC-2025-0162 `VMABuffer::set_data` may allow out-of-bounds writes from safe code
VMABuffer::setdata was a publicly accessible safe function. It accepted an arbitrary offset and a data slice, then used the offset in unsafe pointer arithmetic before copying the slice into a mapped allocation. Affected versions did not check that the requested write range fit within the allocati...
aabb_physics (>=0.1.0, <=0.1.1), acolor (>=0.0.2, <=0.0.11) +117 more potentially affected by unknown CVE via macroquad (>=0.2.9, <=0.4.16)
macroquad CARGO version =0.2.9, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0035...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
Video Tutorial !CVE-2025-24071 Demohttps://img.youtube.co...
[SECURITY] Fedora 41 Update: rust-utf16_iter-1.0.5-1.fc41
Iterator by char over potentially-invalid UTF-16 in &u16...
[SECURITY] Fedora 41 Update: rust-sequoia-openpgp-2.0.0-2.fc41
OpenPGP data types and associated machinery...
[SECURITY] Fedora 41 Update: rust-version-ranges-0.1.1-2.fc41
Performance-optimized type for generic version ranges and operations on them...
[SECURITY] Fedora 41 Update: rust-zerovec-0.10.4-4.fc41
Zero-copy vector backed by a byte array...
[SECURITY] Fedora 41 Update: rust-writeable-0.5.5-3.fc41
A more efficient alternative to fmt::Display...