Lucene search
K

6 matches found

OSV
OSV
added 2021/08/25 8:55 p.m.14 views

GHSA-3W8G-XR3F-2MP8 Out of bounds write in nalgebra

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

9.8CVSS9.3AI score0.00363EPSS
Exploits1References7
Github Security Blog
Github Security Blog
added 2021/08/25 8:55 p.m.34 views

Out of bounds write in nalgebra

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

9.8CVSS8.8AI score0.00363EPSS
Exploits1References7Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/05 7:58 p.m.8 views

VecStorage Deserialize Allows Violation of Length Invariant

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

3.9AI score
Exploits0References6Affected Software1
OSV
OSV
added 2021/08/05 7:58 p.m.1 views

GHSA-H3MF-4FWP-59C7 VecStorage Deserialize Allows Violation of Length Invariant

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

7.1AI score
Exploits0References6
OSV
OSV
added 2021/06/06 12:0 p.m.16 views

RUSTSEC-2021-0070 VecStorage Deserialize Allows Violation of Length Invariant

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

9.8CVSS9.4AI score0.00363EPSS
Exploits1References3
RustSec
RustSec
added 2021/06/06 12:0 p.m.13 views

VecStorage Deserialize Allows Violation of Length Invariant

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

9.8CVSS3.9AI score0.00363EPSS
Exploits1Affected Software1
Rows per page
Query Builder