GHSA-9wgh-vjj7-7433
Suggest an improvement- Source
- https://github.com/advisories/GHSA-9wgh-vjj7-7433
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-9wgh-vjj7-7433/GHSA-9wgh-vjj7-7433.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-9wgh-vjj7-7433
- Aliases
- Published
- 2021-08-25T20:49:54Z
- Modified
- 2023-11-08T04:03:39.222638Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Mutable reference with immutable provenance in image
- Details
-
A mutable reference to a struct was constructed by dereferencing a pointer obtained from slice::asptr. Instead, slice::asmut_ptr should have been called on the mutable slice argument. The former performs an implicit reborrow as an immutable shared reference which does not allow writing through the derived pointer.
- Database specific
{ "cwe_ids": [ "CWE-400" ], "github_reviewed": true, "github_reviewed_at": "2021-08-19T20:49:50Z", "severity": "MODERATE", "nvd_published_at": null }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2020-35916
- https://github.com/image-rs/image/issues/1357
- https://github.com/image-rs/image/pull/1358
- https://github.com/image-rs/image/commit/5cbe1e6767d11aff3f14c7ad69a06b04e8d583c7
- https://github.com/image-rs/image
- https://rustsec.org/advisories/RUSTSEC-2020-0073.html
Affected packages
crates.io / image
Package
- Name
- image
- View open source insights on deps.dev
- Purl
- pkg:cargo/image