3 matches found
CVE-2019-12083
The CVE-2019-12083 issue affects the Rust Standard Library 1.34.x prior to 1.34.2, where a stabilized method, if overridden, can violate Rust safety guarantees. Specifically, overriding Error::type_id can allow casting of any type to another, enabling memory-safety vulnerabilities in otherwise sa...
CVE-2020-36323
CVE-2020-36323 – Rust stdlib string-joining optimization issue : The connected sources confirm a defect in Rust before 1.52.0 where a string-joining optimization could expose uninitialized bytes or cause a crash if the borrowed string changes after its length is checked. This is a security issue ...
CVE-2024-43402
CVE-2024-43402 describes a Rust vulnerability in how Windows batch file names with trailing spaces or periods could bypass the existing mitigation for CVE-2024-24576. The issue arises from how the original fix checked for .bat/.cmd endings, failing to account for Windows normalizing trailing whit...