RUSTSEC-2025-0033

Source
https://rustsec.org/advisories/RUSTSEC-2025-0033
Import Source
https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0033.json
JSON Data
https://api.osv.dev/v1/vulns/RUSTSEC-2025-0033
Aliases
Published
2025-03-27T12:00:00Z
Modified
2025-10-28T06:29:23.563606Z
Summary
Public API without sufficient bounds checking
Details

Match::get() and Match::ptr() lack sufficient bounds checks, leading to potential out of bounds reads.

Database specific
{
    "license": "CC0-1.0"
}
References

Affected packages

crates.io / scanner

Package

Affected ranges

Type
SEMVER
Events
Introduced
0.0.0-0

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "functions": [
            "scanner::Match::get",
            "scanner::Match::ptr"
        ],
        "os": [],
        "arch": []
    }
}

Database specific

categories
[
    "memory-corruption"
]
cvss
null
informational
"unsound"
source
"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0033.json"