RUSTSEC-2021-0118

Source
https://rustsec.org/advisories/RUSTSEC-2021-0118
Import Source
https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2021-0118.json
JSON Data
https://api.osv.dev/v1/vulns/RUSTSEC-2021-0118
Aliases
Published
2021-09-14T12:00:00Z
Modified
2023-11-08T04:22:13Z
Summary
`FixedSizeBinaryArray` does not perform bound checks on accessing values and offsets
Details

FixedSizeBinaryArray performs insufficient bounds checks, which allows out-of-bounds reads in safe code.

Database specific
{
    "license":  "CC0-1.0"
}
References

Affected packages

crates.io / arrow

Package

Affected ranges

Type
SEMVER
Events
Introduced
0.0.0-0
Fixed
6.4.0

Ecosystem specific

{
    "affected_functions":  null,
    "affects":  {
        "arch":  [],
        "functions":  [],
        "os":  []
    }
}

Database specific

categories
[
    "memory-exposure"
]
cvss
null
informational
null
source
"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2021-0118.json"