RUSTSEC-2025-0171

Source
https://rustsec.org/advisories/RUSTSEC-2025-0171
Import Source
https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0171.json
JSON Data
https://api.osv.dev/v1/vulns/RUSTSEC-2025-0171
Published
2025-05-06T12:00:00Z
Modified
2026-08-31T09:00:02Z
Summary
soundness issue
Details

mod3d_base::BufferData::as_ptr lack of sufficient checks to its public self field byte_offset and used unsafely to do the pointer calculation.

Database specific
{
    "license": "CC0-1.0"
}
References

Affected packages

crates.io / mod3d-base

Package

Name
mod3d-base
View open source insights on deps.dev
Purl
pkg:cargo/mod3d-base

Affected ranges

Type
SEMVER
Events
Introduced
0.0.0-0
Fixed
0.3.0

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "arch": [],
        "functions": [
            "mod3d_base::BufferData::as_ptr"
        ],
        "os": []
    }
}

Database specific

categories
[
    "memory-corruption"
]
cvss
null
informational
"unsound"
source
"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0171.json"