HistoryEditJSON (OSV)

RUSTSEC-2025-0137

Unsoundness of safe reciprocal_mg10

Reported
Issued
Package
ruint (crates.io)
Type
Vulnerability
Categories
Keywords
#soundness #out-of-bounds
References
Patched
no patched versions
Affected Functions
Version
ruint::algorithms::div::reciprocal_mg10
  • <1.17.0

Description

The function reciprocal_mg10 is marked as safe but can trigger undefined behavior (out-of-bounds access) because it relies on debug_assert! for safety checks instead of assert!.

When compiled in release mode, the debug_assert! is optimized out, potentially allowing invalid inputs to cause memory corruption.

Advisory available under CC0-1.0 license.