RUSTSEC-2025-0038

Source
https://rustsec.org/advisories/RUSTSEC-2025-0038
Import Source
https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0038.json
JSON Data
https://api.osv.dev/v1/vulns/RUSTSEC-2025-0038
Aliases
Published
2025-04-24T12:00:00Z
Modified
2025-10-28T06:29:26.534058Z
Summary
Out of bounds access in public safe API
Details

Rows::row_unchecked() allows out of bounds access to the underlying buffer without sufficient checks.

The arrow2 crate is no longer maintained, so there are no plans to fix this issue. Users are advised to migrate to the arrow crate, instead.

Database specific
{
    "license": "CC0-1.0"
}
References

Affected packages

crates.io / arrow2

Package

Affected ranges

Type
SEMVER
Events
Introduced
0.0.0-0

Ecosystem specific

{
    "affects": {
        "os": [],
        "arch": [],
        "functions": []
    },
    "affected_functions": null
}

Database specific

categories
[
    "memory-exposure"
]
cvss
null
source
"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0038.json"
informational
null