42 matches found
RUSTSEC-2019-0036 Type confusion if __private_get_type_id__ is overridden
Safe Rust code can implement malfunctioning privategettypeid and cause type confusion when downcasting, which is an undefined behavior. Users who derive Fail trait are not affected...
9.8CVSS9.4AI score0.02874EPSS
SaveExploits1References3
RUSTSEC-2019-0028 Unsound `impl Follow for bool`
The implementation of impl Follow for bool allows to reinterpret arbitrary bytes as a bool. In Rust bool has stringent requirements for its in-memory representation. Use of this function allows to violate these requirements and invoke undefined behaviour in safe code...
9.8CVSS9.5AI score0.00575EPSS
SaveExploits1References3
20