RUSTSEC-2020-0165

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2020-0165

Import Source

https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2020-0165.json

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2020-0165

Aliases

GHSA-v8gq-5grq-9728

Published

2020-07-04T12:00:00Z

Modified

2023-11-08T04:23:09.541378Z

Summary

mozjpeg DecompressScanlines::read_scanlines is Unsound

Details

This issue and vector is similar to [RUSTSEC-2020-0029] of rgb crate which mozjpeg depends on.

Affected versions of mozjpeg crate allow creating instances of any type T from bytes, and do not correctly constrain T to the types for which it is safe to do so.

Examples of safety violation possible for a type T:

T contains a reference type, and it constructs a pointer to an invalid, arbitrary memory address.
T requires a safety and/or validity invariant for its construction that may be violated.

The issue was fixed in 0.8.19 by using safer types and involving rgb dependency bump.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

crates.io / mozjpeg

Package

Name: mozjpeg; View open source insights on deps.dev
Purl: pkg:cargo/mozjpeg

Affected ranges

Type: SEMVER
Events: Introduced

0.0.0-0

Fixed

0.8.19

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "os": [],
        "functions": [
            "mozjpeg::DecompressScanlines::read_scanlines"
        ],
        "arch": []
    }
}

Database specific

{
    "cvss": null,
    "informational": "unsound",
    "categories": [
        "memory-corruption"
    ]
}