RUSTSEC-2025-0019

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2025-0019

Import Source

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2025-0019

Published

2025-03-27T12:00:00Z

Modified

2025-03-30T09:10:10Z

Summary

`array-init-cursor` in version 0.2.0 and below is unsound when used with types that implement `Drop`

Details

The Drop implementation will get run twice when using the cursor.

This issue does not affect you, if you are using only using the crate with types that are Copy such as u8.

This issue also does not affect you, if you are only depending on it through the crate planus.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

{
    "affected_functions": null,
    "affects": {
        "os": [],
        "functions": [],
        "arch": []
    }
}

{
    "cvss": null,
    "informational": "unsound",
    "categories": [
        "memory-corruption"
    ]
}