Lucene search
+L

3 matches found

RustSec
RustSec
added 2023/06/26 12:0 p.m.5 views

impl `FromMdbValue` for bool is unsound

The implementation of FromMdbValue have several unsoundness issues. First of all, it allows to reinterpret arbitrary bytes as a bool and could make undefined behavior happen with safe function. Secondly, it allows transmuting pointer without taking memory layout into consideration. The details of...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/02/09 12:0 p.m.30 views

RUSTSEC-2021-0022 Use-after-free in `subscript_next` and `subscript_prev` wrappers

Affected versions of this crate had an unsound implementation which could pass a pointer to freed memory to ydbsubscriptnextst and ydbsubscriptprevst if the variable and subscripts did not have enough memory allocated on the first call to hold the next variable in the database. For example, the...

9.8CVSS9.5AI score0.01308EPSS
SaveExploits1References3
RustSec
RustSec
added 2021/02/09 12:0 p.m.29 views

Use-after-free in `subscript_next` and `subscript_prev` wrappers

Affected versions of this crate had an unsound implementation which could pass a pointer to freed memory to ydbsubscriptnextst and ydbsubscriptprevst if the variable and subscripts did not have enough memory allocated on the first call to hold the next variable in the database. For example, the...

9.8CVSS3.2AI score0.01308EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder