RUSTSEC-2021-0009

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2021-0009

Import Source

https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2021-0009.json

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2021-0009

Aliases

CVE-2021-25906
GHSA-fjr6-hm39-4cf9

Published

2021-01-10T12:00:00Z

Modified

2023-11-08T04:05:16.857288Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

panic safety issue in `impl TransformContent<S, D> for [S; (2|3|4)]`

Details

Affected versions of this crate did not guard against double drop while temporarily duplicating objects' ownership using ptr::read(). Upon panic in a user-provided function conversion, objects that are copied by ptr::read() are dropped twice, leading to memory corruption.

The flaw was corrected in v0.9.2 by using ManuallyDrop<T> to enclose objects that are to be temporarily duplicated.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

crates.io / basic_dsp_matrix

Package

Name: basic_dsp_matrix; View open source insights on deps.dev
Purl: pkg:cargo/basic_dsp_matrix

Affected ranges

Type: SEMVER
Events: Introduced

0.0.0-0

Fixed

0.9.2

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "os": [],
        "functions": [],
        "arch": []
    }
}

Database specific

{
    "cvss": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
    "informational": null,
    "categories": [
        "memory-corruption"
    ]
}