Lucene search
K

5 matches found

OSV
OSV
added 2024/01/02 4:28 p.m.25 views

GHSA-875G-MFP6-G7F9 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access

Impact An issue was discovered in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper, which can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array lengt...

5.7CVSS7.3AI score0.001EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2024/01/02 4:28 p.m.34 views

`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access

Impact An issue was discovered in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper, which can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array lengt...

9.8CVSS6.7AI score0.001EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2024/01/02 12:0 p.m.16 views

RUSTSEC-2024-0002 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access

Impact An issue was discovered in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper, which can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array lengt...

5.7CVSS7.4AI score0.001EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2023/03/24 10:0 p.m.19 views

Versionize::deserialize implementation for FamStructWrapper<T> is lacking bound checks, potentially leading to out of bounds memory accesses

Impact An issue was discovered in the Versionize::deserialize implementation provided by the versionize crate for vmmsysutil::fam::FamStructWrapper, which can lead to out of bounds memory accesses. Patches The impact started with version 0.1.1. The issue was corrected in version 0.1.10 by inserti...

7.5CVSS7.3AI score0.00284EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2023/03/24 12:0 p.m.16 views

RUSTSEC-2023-0030 `Versionize::deserialize` implementation for `FamStructWrapper<T>` is lacking bound checks, potentially leading to out of bounds memory accesses

An issue was discovered in the Versionize::deserialize implementation provided by the versionize crate for vmmsysutil::fam::FamStructWrapper, which can lead to out of bounds memory accesses. The impact started with version 0.1.1. The issue was corrected in version 0.1.10 by inserting a check that...

5.7CVSS6.2AI score0.00284EPSS
Exploits0References3
Rows per page
Query Builder