Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 8:55 p.m.35 views

Out of bounds write in nalgebra

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

9.8CVSS8.8AI score0.01411EPSS
Exploits1References7Affected Software1
OSV
OSV
added 2021/08/25 8:55 p.m.14 views

GHSA-3W8G-XR3F-2MP8 Out of bounds write in nalgebra

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

9.8CVSS9.3AI score0.01411EPSS
Exploits1References7
Github Security Blog
Github Security Blog
added 2021/08/05 7:58 p.m.9 views

VecStorage Deserialize Allows Violation of Length Invariant

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

3.9AI score
Exploits0References6Affected Software1
OSV
OSV
added 2021/08/05 7:58 p.m.1 views

GHSA-H3MF-4FWP-59C7 VecStorage Deserialize Allows Violation of Length Invariant

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

7.1AI score
Exploits0References6
RustSec
RustSec
added 2021/06/06 12:0 p.m.17 views

VecStorage Deserialize Allows Violation of Length Invariant

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

9.8CVSS3.9AI score0.01411EPSS
Exploits1Affected Software1
OSV
OSV
added 2021/06/06 12:0 p.m.16 views

RUSTSEC-2021-0070 VecStorage Deserialize Allows Violation of Length Invariant

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

9.8CVSS9.4AI score0.01411EPSS
Exploits1References3
Rows per page
Query Builder