CVE-2020-25792

High

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when…

mitre·CWE-129·Published 2020-09-19

CVSS

7.5

EPSS

0.03

KEV

Exploits

cve.orgen

162 chars

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair().

NVDen

162 chars

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair().

Chunk: * Array size is not checked when constructed with `unit()` and `pair()`. * Array size is not checked when constructed with `From<InlineArray<A, T>>`. * `Clone` and `insert_from` are not panic-safe; A panicking iterator causes memory safety issues with them. InlineArray: * Generates unaligned references for types with a large alignment requirement.

GHSAen

162 chars

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair().

NVDes

198 chars

Se detectó un problema en el crate sized-chunks versiones hasta 0.6.2 para Rust. En la implementación de Chunk, el tamaño de la matriz no es comprobado cuando se construye con la función pair()

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	GHSA	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H