Reported

May 6, 2025

Issued

June 2, 2025

Package

anon-vec (crates.io)

Type

INFO Unsound

Categories

• memory-corruption

References

• https://github.com/RylanYancey/anon-vec

Patched

no patched versions

Affected Functions

Version

anon_vec::AnonVec::get_mut

• <=0.1.1

anon_vec::AnonVec::get_ref

• <=0.1.1

anon_vec::AnonVec::remove_get

• <=0.1.1

Description

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments::

• AnonVec::get_ref()
• AnonVec::get_mut()
• AnonVec::remove_get()

The crate was built as a learning project and is not being maintained.

Advisory available under CC0-1.0 license.