CVE-2020-35864

CVE-2020-35864 affects the Rust implementation of the flatbuffers crate up to 2020-04-11. The root cause is that read_scalar and read_scalar_at can transmute values without using unsafe blocks. The available connected sources confirm this behavior but do not provide explicit remediation steps, af...

CVE-2019-25004

CVE-2019-25004 affects the Rust crate flatbuffers prior to 0.6.1. The root cause is an implementation of impl Follow for bool that allows arbitrary bytes to be reinterpreted as a bool, defeating soundness. This could enable a remote attacker to bypass security restrictions by sending specially cr...