- CVSS Score
- CVSS Details
- Attack vector
- Attack complexity
- Privileges required
- User interaction
- CVSS Vector
no patched versions
Code generated by flatbuffers' compiler is
unsafe but not marked as such.
See https://github.com/google/flatbuffers/issues/6627 for details.
All users that use generated code by
flatbuffers compiler are recommended to:
- not expose flatbuffer generated code as part of their public APIs
- audit their code and look for any usage of
push, or any method that uses them
- Carefuly go through the crates' documentation to understand which "safe" APIs are not
intended to be used.