RUSTSEC-2025-0062

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2025-0062

Import Source

https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0062.json

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2025-0062

Aliases

GHSA-pfp7-vxgr-83pw

Published

2025-05-22T12:00:00Z

Modified

2025-10-28T06:29:25Z

Summary

Heap Buffer Overflow in the DrainCol Destructor

Details

An off-by-one error in the DrainCol::drop destructor could cause an unsafe memory copy operation to exceed the bounds of the associated vector.

The error was related to the size of the data being copied in one of the ptr::copy invocations inside the destructor.

When removing the first column from a TooDee object, the DrainCol return object could cause a heap buffer overflow vulnerability when it is dropped.

The issue was fixed in commit e6e16d5 by reducing the copied size by one.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

crates.io / toodee

Package

Name: toodee; View open source insights on deps.dev
Purl: pkg:cargo/toodee

Affected ranges

Type: SEMVER
Events: Introduced

0.2.0

Fixed

0.6.0

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "arch": [],
        "functions": [
            "toodee::DrainCol::drop"
        ],
        "os": []
    }
}