Issued

September 6, 2020

Package

sized-chunks (crates.io)

Type

Vulnerability

Aliases

• CVE-2020-25791
• CVE-2020-25792
• CVE-2020-25793
• CVE-2020-25794
• CVE-2020-25795
• CVE-2020-25796

Details

https://github.com/bodil/sized-chunks/issues/11

Patched

• >=0.6.3

Description

Chunk:

• Array size is not checked when constructed with unit() and pair().
• Array size is not checked when constructed with From<InlineArray<A, T>>.
• Clone and insert_from are not panic-safe; A panicking iterator causes memory safety issues with them.

InlineArray:

• Generates unaligned references for types with a large alignment requirement.

More

• Advisory History
• Edit Advisory