GHSA-9cc5-2pq7-hfj8

Source

https://github.com/advisories/GHSA-9cc5-2pq7-hfj8

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/03/GHSA-9cc5-2pq7-hfj8/GHSA-9cc5-2pq7-hfj8.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-9cc5-2pq7-hfj8

Published

2025-03-26T20:11:24Z

Modified

2025-03-26T20:11:25Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

xmas-elf potential out-of-bounds read with a malformed ELF file and the HashTable API.

Details

Affected versions of this crate only validated the index argument of HashTable::get_bucket and HashTable::get_chain against the input-controlled bucket_count and chain_count fields, but not against the size of the ELF section. As a result, a malformed ELF file could trigger out-of-bounds reads in a consumer of the HashTable API by setting these fields to inappropriately large values that would fall outside the relevant hash table section, and by introducing correspondingly out-of-bounds hash table indexes elsewhere in the ELF file.

Database specific

{
    "nvd_published_at": null,
    "cwe_ids": [
        "CWE-125"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2025-03-26T20:11:24Z"
}

References

Affected packages

crates.io / xmas-elf

Package

Name: xmas-elf; View open source insights on deps.dev
Purl: pkg:cargo/xmas-elf

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.10