RUSTSEC-2025-0072

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2025-0072

Import Source

https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0072.json

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2025-0072

Aliases

GHSA-466c-pfvv-v83g

Published

2025-10-02T12:00:00Z

Modified

2025-10-28T06:29:22.855364Z

Summary

soundness issue and unmaintained

Details

All functions under wrflib::byte_extract are simply wrapper of unsafe pointer offset and lacks sufficient checks to it pointer and offset parameter.

wrflib is unmaintained.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

crates.io / wrflib

Package

Name: wrflib; View open source insights on deps.dev
Purl: pkg:cargo/wrflib

Affected ranges

Type: SEMVER
Events: Introduced

0.0.0-0

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "os": [],
        "functions": [
            "wrflib::byte_extract::get_f32_le",
            "wrflib::byte_extract::get_f32_le_as_f32",
            "wrflib::byte_extract::get_f64_le",
            "wrflib::byte_extract::get_f64_le_as_f32",
            "wrflib::byte_extract::get_i16_le",
            "wrflib::byte_extract::get_i16_le_as_f32",
            "wrflib::byte_extract::get_i32_le",
            "wrflib::byte_extract::get_i32_le_as_f32",
            "wrflib::byte_extract::get_i64_le",
            "wrflib::byte_extract::get_i64_le_as_f32",
            "wrflib::byte_extract::get_i8_le",
            "wrflib::byte_extract::get_i8_le_as_f32",
            "wrflib::byte_extract::get_u16_le",
            "wrflib::byte_extract::get_u16_le_as_f32",
            "wrflib::byte_extract::get_u32_le",
            "wrflib::byte_extract::get_u32_le_as_f32",
            "wrflib::byte_extract::get_u64_le",
            "wrflib::byte_extract::get_u64_le_as_f32",
            "wrflib::byte_extract::get_u8_le",
            "wrflib::byte_extract::get_u8_le_as_f32"
        ],
        "arch": []
    }
}

Database specific

informational

"unsound"

cvss

null