Reported

September 14, 2021

Issued

September 29, 2021 (last modified: December 22, 2021)

Package

arrow (crates.io)

Type

Vulnerability

Categories

• memory-exposure

Keywords

#buffer-overflow

Details

https://github.com/apache/arrow-rs/issues/774

Patched

• >=6.4.0

Description

FixedSizeBinaryArray performs insufficient bounds checks, which allows out-of-bounds reads in safe code.